CVE-2024-24696 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access.

EPSS estimates a 0.80% chance of exploitation in the next 30 days.

## Description
Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access.

## Metrics
CVSS 3.16.5/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Probability 0.80%

52.1th percentile

Probability of exploitation in the next 30 days. [Learn more](https://www.first.org/epss/)

## Weakness Enumeration
- [CWE-20](https://cwe.mitre.org/data/definitions/20.html)

## Affected Software
| Vendor | Product | Versions |
| --- | --- | --- |
| Zoom | Meeting Software Development Kit | < 5.17.0 |
| Zoom | Vdi Windows Meeting Clients | < 5.15.15 |
| Zoom | Vdi Windows Meeting Clients | > 5.15.15, < 5.16.12 |
| Zoom | Vdi Windows Meeting Clients | > 5.16.12, < 5.17.0 |
| Zoom | Zoom | < 5.17.0 |

## References
- [Vendor Advisory](https://www.zoom.com/en/trust/security-bulletin/ZSB-24003/)

## Timeline
Published Feb 14, 2024

Last Modified Jun 17, 2026

Status Modified

## Frequently Asked Questions
### What is CVE-2024-24696?
Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access.

### How severe is CVE-2024-24696?
CVE-2024-24696 has a CVSS score of 6.5/10 (MEDIUM severity). The EPSS model estimates a 0.80% probability of exploitation in the next 30 days.

### How do I fix CVE-2024-24696?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also [run a Strix scan](https://app.strix.ai/) to test if your systems are affected.