Zoom Vdi
Monthly
Path traversal (CWE-23) in Zoom VDI Client and Plugins exposes authenticated local users to information disclosure and potential file integrity impact by allowing directory escape via crafted path input. Affected are all tracked versions under cpe:2.3:a:zoom_communications:zoom_vdi. No public exploit code or CISA KEV listing exists at time of analysis, but the High confidentiality and integrity impact ratings warrant prompt patching in VDI environments where insider or post-compromise scenarios are relevant threats.
Path traversal (CWE-23) in Zoom VDI Client and Plugins exposes authenticated local users to information disclosure and potential file integrity impact by allowing directory escape via crafted path input. Affected are all tracked versions under cpe:2.3:a:zoom_communications:zoom_vdi. No public exploit code or CISA KEV listing exists at time of analysis, but the High confidentiality and integrity impact ratings warrant prompt patching in VDI environments where insider or post-compromise scenarios are relevant threats.