What’s Vulnerable › Vulnerabilities

CVE-2024-39822: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-14 · updated 2026-06-17
• Weakness: CWE-200

Description

Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.

Affected products

• Zoom Meeting Software Development Kit: before 6.0.12 — fixed in 6.0.12
• Zoom Video Communications, Inc. Zoom Rooms for Windows: before 6.1.0 — fixed in 6.1.0
• Zoom Rooms Controller: before 6.1.0 — fixed in 6.1.0
• Zoom Workplace: before 6.0.12 — fixed in 6.0.12
• Zoom Communications, Inc Zoom Workplace Desktop App for macOS: before 6.0.12 — fixed in 6.0.12

How to fix

Upgrade to a fixed version: Zoom Meeting Software Development Kit 6.0.12; Zoom Video Communications, Inc. Zoom Rooms for Windows 6.1.0; Zoom Rooms Controller 6.1.0; Zoom Workplace 6.0.12; Zoom Communications, Inc Zoom Workplace Desktop App for macOS 6.0.12. Check the vendor advisory for mitigations.

References

• https://www.zoom.com/en/trust/security-bulletin/zsb-24029

Get alerted when CVE-2024-39822 or the next vulnerability affects your stack