Input validation error in Zoom Workplace Desktop App for Windows - CVE-2024-27240
Published: July 9, 2024 / Updated: March 17, 2025
Vulnerability identifier: #VU93885
CSH Severity: High
CVSS v4: 8.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-27240
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can trick the victim into opening a specially crafted file and execute arbitrary code on the system.
Affected software
Zoom Workplace Desktop App for Windows
Zoom Rooms Client for Windows
Virtual Desktop Infrastructure (VDI)
Zoom Rooms Client for Windows
Virtual Desktop Infrastructure (VDI)
How to mitigate CVE-2024-27240
Install updates from vendor's website.
Zoom Workplace Desktop App for Windows - update to 6.0.0 37205
Zoom Rooms Client for Windows - update to 6.0.0
Virtual Desktop Infrastructure (VDI) - update to 5.17.13
Zoom Rooms Client for Windows - update to 6.0.0
Virtual Desktop Infrastructure (VDI) - update to 5.17.13