CVE-2024-39826

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-39826
Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access.

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.zoom.com/en/trust/security-bulletin/zsb-24023 Vendor Advisory
https://www.zoom.com/en/trust/security-bulletin/zsb-24023 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
History

02 Oct 2025, 21:15

Type Values Removed Values Added
Summary (en) Path traversal in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access. (en) Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access.

05 Aug 2025, 13:44

Type Values Removed Values Added
References () https://www.zoom.com/en/trust/security-bulletin/zsb-24023 - () https://www.zoom.com/en/trust/security-bulletin/zsb-24023 - Vendor Advisory
First Time Zoom workplace Virtual Desktop Infrastructure
Zoom meeting Software Development Kit
Zoom
Zoom workplace Desktop
CPE cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
CWE CWE-22

21 Nov 2024, 09:28

Type Values Removed Values Added
References () https://www.zoom.com/en/trust/security-bulletin/zsb-24023 - () https://www.zoom.com/en/trust/security-bulletin/zsb-24023 -

16 Jul 2024, 13:43

Type Values Removed Values Added
Summary
  • (es) El path traversal en Team Chat para algunas aplicaciones Zoom Workplace y SDK para Windows puede permitir que un usuario autenticado realice la divulgación de información a través del acceso a la red.

15 Jul 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-15 18:15

Updated : 2025-10-02 21:15

NVD link : CVE-2024-39826

Mitre link : CVE-2024-39826

CVE.ORG link : CVE-2024-39826

JSON object : View

Products Affected

zoom

  • meeting_software_development_kit
  • workplace_virtual_desktop_infrastructure
  • workplace_desktop
CWE
CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')