Vulnerability · Published Sep 27, 2021 · Assigned by Zoom
CVE-2021-34413
High 7.5
In plain English
A high-severity security flaw in Zoom Plugin for Microsoft Outlook for MacOS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.6%top 51.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability during the plugin installation process. This could allow a standard user to write their own malicious application to the plugin directory, allowing the malicious application to execute in a privileged context.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Zoom Plugin for Microsoft Outlook for MacOS | All versions before 5.3.52553.0918 |
References
- https://explore.zoom.us/en/trust/security/security-bulletin/ x_refsource_CONFIRM