CVE-2024-39818

6.5 mediumEPSS 0.6%

Medium (6.5) in zoom. EPSS 0.6% chance of exploitation in the next 30 days.

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2024-08-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zoom:rooms
zoom:workplace
zoom:workplace_desktop
zoom:workplace_virtual_desktop_infrastructure

References

https://www.zoom.com/en/trust/security-bulletin/zsb-24022

Check your stack JSON