VULNERABILITY INTELLIGENCE
CVE-2021-30480
CVSS score8.5 HIGH
EPSS probability7.21%
CISA KEVNot currently listed
Published2021-04-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary code without user interaction. An attacker must be within the same organization, or an external party who has been accepted as a contact. NOTE: this is specific to the Zoom Chat software, which is different from the chat feature of the Zoom Meetings and Zoom Video Webinars software.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Exploit, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Press/Media Coverage, Third Party Advisory
- cve@mitre.org — Press/Media Coverage, Third Party Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Product, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory