CVE-2024-45421

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Feb 25, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-454227.5Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via networCVE-2024-454247.5Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network accessCVE-2024-454256.5Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.CVE-2024-454266.5Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network acceCVE-2024-454296.1Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5CVE-2024-45434.3The Snippet Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.1.4. This isCVE-2024-454315.3OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. TCVE-2024-454327.5OpenSynergy BlueSDK (aka Blue SDK) through 6.x mishandles a function call. The specific flaw exists within the BlueSDK Bluetooth stack. The CVE-2024-454336.5OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth staCVE-2024-454349.8OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Bluetooth stack. The issue CVE-2024-454359.8Chartist 1.x through 1.3.0 allows Prototype Pollution via the extend function.CVE-2024-454367.5extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.
CVE-2024-45421: High severity, CVSS 8.8 | Vulnix