Yüksek CVSS 7
CVE-2026-53410: Remote Control For Zoom Contact Center: güvenlik açığı
Açıklama (NVD)
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
Özet bilgiler
- Ürün
- Zoom Remote Control For Zoom Contact Center
- CVSS v3.1
- 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,10 (yüzdelik 1)
- CWE
- CWE-367
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| zoom-remote-control-for-zoom-contact-center | — | — | 7.0.0 |
| zoom-rooms | — | — | 7.0.5 |
| zoom-workplace-desktop | — | — | 7.0.5 |
| zoom-workplace-virtual-desktop-infrastructure | — | — | 6.5.17 |
| zoom-workplace-virtual-desktop-infrastructure | 6.6.0 | — | 6.6.14 |