Zoom patches worrying security Windows flaw – make sure you’re protected, update now

• Zoom warns multiple versions of its Windows client are vulnerable
• A security flaw can be used to fully take over target endpoints
• Zoom advises patching immediately, so users should update now

Zoom has patched a critical severity vulnerability which could have allowed threat actors to escalate their privileges over the network.

The online collaboration tool found its Windows application doesn’t always use explicit full paths when loading dynamic libraries (DLLs). Instead, it relies on Windows’ default search order, which means if an attacker were to place a malicious DLL into the right location, Zoom may load and execute it. It is similar to the Bring-Your-Own-Vulnerable-Driver type of attack, although not identical.