Zoom macOS Outlook Plugin Installer Local Privilege Escalation

  • ZSB-21009
  • CVE-2021-34413
  • Low
  • 2.8
  • CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N

All versions of the Zoom Plugin for Microsoft Outlook for macOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability during the plugin installation process. This could allow a standard user to write their own malicious application to the plugin directory, allowing the malicious application to execute in a privileged context.

  • All versions of the Zoom Plugin for Microsoft Outlook for macOS before 5.3.52553.0918

Reported by the Lockheed Martin Red Team

Revision Date Description
Dummy Data 09/30/2021

Initial Publication