high
advisory
Zoom Workplace: Multiple vulnerabilities allowing privilege escalation
Zoom Workplace is affected by multiple vulnerabilities that allow a remote, anonymous attacker to perform privilege escalation.
Triage facts
Revision 1- Applicability
- Zoom Workplace
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 15:54 UTC
- Source quality
- A1
Zoom Video Communications Workplace is affected by multiple vulnerabilities that can be exploited by a remote, anonymous attacker to perform privilege escalation. Specific technical details and affected version ranges are not provided in the source report.
Recommendation
- Monitor official Zoom security bulletins for updates and patch availability.
Threat Hunt
Identify child processes spawned by Zoom-related executables (e.g., Zoom.exe) that execute with higher integrity levels or user context than the parent process, specifically monitoring for unusual command-line arguments or binary paths.
T1068
high
medium confidence
hunt now
Data: Process Creation logs (ParentProcessName, ProcessName, IntegrityLevel, CommandLine)