# MA-1012.012024: MyCERT Advisory - High-Severity Vulnerability in Zoom Products

**Date:** 17 Jan 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1012.012024  
**Advisory ID:** MA-1012.012024

---

**1.0 Introduction**
Recently, MyCERT has observed a high severity vulnerability in Zoom products that could be exploited to gain unauthorized access and control over affected systems.
**2.0 Impact**
Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access.
**3.0 Affected Products**
- Zoom Desktop Client for Windows before version 5.16.10
- VDI Client for Windows before version 5.16.10 (excluding 5.14.14 and 5.15.12)
- Zoom Video SDK for Windows before version 5.16.10
- Zoom Meeting SDK for Windows before version 5.16.10
**4.0 Recommendations**
Users and system administrators are encouraged to review the Zoom Security Bulletin and upgrade to the latest version.
Kindly refer to the URL for more information:
<https://www.zoom.com/en/trust/security-bulletin/ZSB-24001/>
Generally, MyCERT advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
<https://www.zoom.com/en/trust/security-bulletin/ZSB-24001/>