Zoom has released multiple security updates revealing newly discovered vulnerabilities in its Workplace Apps across various platforms, including Windows, macOS, Linux, iOS and Android.
Among the seven security issues discovered, one was marked as high severity due to its potential impact.
The reported flaws could have allowed hackers to escalate privileges within the affected applications by exploiting various attack vectors, posing risks to user data and system integrity.
- Essential Zoom Security Practices Every IT Leader Should Implement: Securing the Digital Workforce
- The Ultimate Zoom Communications Guide: Everything You Need to Know
In its advisory, the company said: “Zoom does not provide guidance on vulnerability impacts to individual customers due to a Zoom Security Bulletin or provide additional details about a vulnerability.
We recommend users to update to the latest version of Zoom software in order to get the latest fixes and security improvements.”
The updates affect both general app versions and Windows-specific builds.
What Were the Risks?
The most critical vulnerability was a Time-of-check, Time-of-use (TOCTOU) flaw, which occurs when there is a race condition between checking and using a resource. This issue could potentially allow malicious actors to gain unauthorised access or elevate their privileges within the Zoom Workplace Apps environment.
