CVE-2024-24690

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1284

Affected software

No affected versions have been published.

Timeline

Published
Feb 14, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-246919.8Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unaCVE-2024-246924.7Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial CVE-2024-246935.5Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct CVE-2024-246947.8Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user toCVE-2024-246956.5Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an autCVE-2024-246966.5Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an autCVE-2024-246977.8Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local acCVE-2024-246984.4Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.CVE-2024-246996.5Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.CVE-2024-24705.4The Simple Ajax Chat WordPress plugin before 20240412 does not sanitise and escape some of its settings, which could allow high privilege uCVE-2024-247007.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Rojas WP Editor allows ReflecCVE-2024-247018.8Cross-Site Request Forgery (CSRF) vulnerability in Native Grid LLC A no-code page builder for beautiful performance-based content.This issue
CVE-2024-24690: Medium severity, CVSS 6.5 | Vulnix