Zoom Updates Mac App With Important Security Fix

Sunday August 14, 2022 10:43 am PDT by Joe Rossignol

Zoom has released a new version of its macOS app with a fix for a security vulnerability affecting the app's automatic updates feature.

In an August 13 security bulletin, Zoom said version 5.7.3 to version 5.11.3 of its macOS app contain a vulnerability in the auto-update process that can be exploited by a local low-privileged user to gain root privileges to the operating system. The vulnerability has been patched in version 5.11.5 of the Zoom app for macOS, available now.

The vulnerability was revealed by Mac security researcher Patrick Wardle at the hacking conference DEF CON in Las Vegas on Friday. The Verge and WIRED shared more details about Wardle's findings for those interested in learning more.

Tag: Zoom

Top Rated Comments

KaliYoni

48 months ago

Tip: occasional or casual users of Zoom do not have to install the Zoom client. Zoom will run in most web browsers with no downloads or installations needed.

Simply follow the conference link sent out by the conference organizer. Then wait until a "Join in browser" link appears in the browser window. If Zoom automatically downloads a software installer, avoid clicking on the installer and move it to the Trash.

Sometimes the "Join in browser" link doesn't appear automatically. If so, try clicking on the Join Meeting button (yes, even though you haven't installed the Zoom software).

----------
ETA: additional info below. ('https://forums.macrumors.com/threads/zoom-updates-mac-app-with-important-security-fix.2354682/post-31337055')

Score: 18 Votes (Like | Disagree)

triptolemus

48 months ago

You’d use it if keeping your job depended on it. Boss calls a Zoom meeting and you say, “Sorry, Zoom is a plague and I refuse to use it.” Yeah, right you would.

This.

People "refusing to use Zoom" are the same people with whom no one is trying to meet.

Score: 14 Votes (Like | Disagree)

avkills

48 months ago

Hate to break the news, but all of the so-called video teleconference / meeting apps suck. In my experience Zoom sucks the least or it allows you to almost do what you need to.

Score: 13 Votes (Like | Disagree)