HackAndPwn
Security & Vulnerability Researcher / Professional Penetration Tester

CVE-2021-34408

Zoom MSI Installer Elevated Write Using A Junction - A user-writable directory created during the installation of the Zoom Client for Meetings for Windows version prior to version 5.3.2 can be redirected to another location using a junction. This would allow an attacker to overwrite files that a limited user would otherwise be unable to modify.

Zoom Security Bulletin


buy me a coffee