Mahalos to for the (incredibly) quick fix! Īmusingly, if that is the right word, the patch to patch the incomplete patch was itself quickly found to be incomplete by researcher Csaba Fitzl, and the patch for the incomplete fix (5.11.5) was quickly superseded by a patch for the patch for the incomplete fix (5.11.6): Zoom immediately worked on a patch for the flaw, which was announced the next day in Zoom security bulletin ZSB-22018, earning a congratulatory reply from Wardle in the process: In the tweet, which followed his talk, Wardle noted:Ĭurrently there is no patch Slides with full details & PoC exploit: #0day /9dW7DdUm7P Was stoked to talk about (& live-demo 😅) a local priv-esc vulnerability in Zoom (for macOS).

Mahalo to everybody who came to my talk 'You're M̶u̶t̶e̶d̶ Rooted' 🙏🏽

If you are due for an update, Zoom will automatically begin to update your app and you'll momentarily be unable to start or join calls.At the well-known DEF CON security shindig in Las Vegas, Nevada, last week, Mac cybersecurity researcher Patrick Wardle revealed a “get-root” elevation of privilege (EoP) bug in Zoom for Mac:

If you are up-to-date with your app version, a pop-up will appear to tell you so. Select 'Check for updates' from the dropdown menu.If you haven't changed your photo, the icon will appear as your initials inside a colored square. Click on your profile picture in the top-right corner.If up-to-date, you'll see a pop-up notification, and if not, Zoom will automatically begin updating to the newer version. To update Zoom, click on your profile in the upper right-hand corner of the screen and select 'Check for updates' from the dropdown menu. Here's how to manually update the Zoom desktop client in a few simple steps. By ignoring this optional update notification, you will only be prompted to update the next time you use the app. If you use the app frequently, you'll want to make sure you are using the latest version on your desktop to avoid any potential issues. Quick tip: There is no manual update option on the mobile Zoom app for iPhones, iPads, or Android devices because it will update automatically. While the Zoom mobile app should automatically download updates, you may need to manually check for updates on the Zoom desktop app if you don't click 'update' when the pop-up first appears.

Zoom auto update