CVE-2021-30480

Katalog CVE

CVSS 8.8 · High EPSS 5,8%

Kerentanan pada zoom chat. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary code without user interaction. An attacker must be within the same organization, or an external party who has been accepted as a contact. NOTE: this is specific to the Zoom Chat software, which is different from the chat feature of the Zoom Meetings and Zoom Video Webinars software.

Rincian

Terbit di NVD

9 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

5,8% peluang dieksploitasi; lebih tinggi dari 93,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://explore.zoom.us/en/trust/security/security-bulletin/ advisory vendor
• https://zoom.us/feature/messaging product · advisory vendor
• https://blog.malwarebytes.com/exploits-and-vulnerabilities/2021/04/zoom-zero-day-discovery-makes-calls-safer-h... advisory pihak ketiga
• https://sector7.computest.nl/post/2021-08-zoom/ exploit · advisory pihak ketiga
• https://twitter.com/thezdi/status/1379855435730149378 advisory pihak ketiga
• https://twitter.com/thezdi/status/1379859851061395459 advisory pihak ketiga
• https://www.securityweek.com/200000-awarded-zero-click-zoom-exploit-pwn2own press/media coverage · advisory pihak ketiga
• https://www.zdnet.com/article/critical-zoom-vulnerability-triggers-remote-code-execution-without-user-input/ press/media coverage · advisory pihak ketiga
• https://www.zerodayinitiative.com/advisories/ZDI-21-971/ advisory pihak ketiga · vdb entry