Vulnerability · critical
Zoom fixes critical Windows flaw allowing privilege escalation
Tier A · Patch today – Before you go home
Who’s exposed: Windows endpoints running Zoom Workplace client
Tier A because: Core infrastructure or popular tool AND remote, no login AND full takeover
Reach
Attack
Damage
Fix
Popular tool · Remote, no login · Full takeover
What to do
- Update Zoom Workplace for Windows to the patched version released by Zoom.
The Brief
- Zoom released security updates fixing two vulnerabilities in Zoom Workplace for Windows.
- One of the flaws is rated critical and could let attackers gain higher privileges.
- Per the Security Affairs summary, the critical bug could be exploited remotely by unauthenticated attackers.
Why it matters
Organisations running Zoom Workplace on Windows should update, since a critical remote privilege escalation flaw affects endpoints where the client is installed.
The checklist behind the tier
Checklist · 4 of 10 yes
| Yes | Hits tech teams | Judgment: Zoom Workplace for Windows is enterprise collaboration software that IT teams deploy and manage. |
| No | Core infrastructure | Judgment: a single vendor's desktop client, not software nearly every team runs. |
| Yes | Popular tool | Judgment: Zoom is a mainstream platform used by many organizations, though not developer tooling. |
| No | Exploited in the wild | Security Affairs reports only the fix; no observed attacks are mentioned. |
| No | Public exploit | Security Affairs mentions no published exploit code or proof-of-concept. |
| Yes | Remote, no login | Security Affairs: critical bug could let unauthenticated attackers remotely escalate privileges. |
| Yes | Full takeover | Security Affairs: flaw lets attackers gain higher privileges, i.e. privilege escalation. |
| No | Secrets exposed | Security Affairs reports no stolen credentials, tokens, or data. |
| No | Supply chain | Security Affairs describes a vulnerability fix, not malicious code shipped through a trusted channel. |
| No | No fix yet | Security Affairs: Zoom has released security updates fixing the vulnerabilities. |
Timeline
Security Affairs reports that Zoom has released security updates fixing the two Windows Workplace flaws
Security Affairs
Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation
Source
Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation ↗ Security Affairs · 1h ago
First seen · 1 source · Full story page · How tiers are decided