CVE-2020-11469

HIGH

Zoom Client for Meetings <4.6.8 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (with the user's privileges) to obtain root access by replacing runwithroot.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://objective-see.com/blog/blog_0x56.html

Scores

CVSS v3 7.8
EPSS 0.0014
EPSS Percentile 33.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-552
Status published
Products (1)
zoom/meetings < 4.6.8
Published Apr 01, 2020
Tracked Since Feb 18, 2026