CVE-2024-45418

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-61 CWE-59

Affected software

No affected versions have been published.

Timeline

Published: Feb 25, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-454197.5Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.CVE-2024-454206.5Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via CVE-2024-454218.8Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.CVE-2024-454227.5Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via networ CVE-2024-454247.5Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access CVE-2024-454256.5Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.CVE-2024-454266.5Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network acce CVE-2024-454296.1Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 CVE-2024-45434.3The Snippet Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.1.4. This is CVE-2024-454315.3OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. T CVE-2024-454327.5OpenSynergy BlueSDK (aka Blue SDK) through 6.x mishandles a function call. The specific flaw exists within the BlueSDK Bluetooth stack. The CVE-2024-454336.5OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth sta