vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2019-13450

N/A
Published: July 9, 2019 at 05:49 AM UTC
Updated: June 17, 2026 at 02:16 AM UTC
2 products affected across 2 vendorsZoomRingcentral

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 4%

Description

In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerable if the Zoom Client was installed in the past and then uninstalled. Blocking exploitation requires additional steps, such as the ZDisableVideo preference and/or killing the web server, deleting the ~/.zoomus directory, and creating a ~/.zoomus plain file.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (8)

VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/109082
x_refsource_MISCVendor Advisory
Source: [email protected]
https://assets.zoom.us/docs/pdf/Zoom+Response+Video-On+Vulnerability.pdf
x_refsource_MISCVendor Advisory
Source: [email protected]
https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/
x_refsource_MISCExploitThird Party Advisory
Source: [email protected]
https://bugs.chromium.org/p/chromium/issues/detail?id=951540
x_refsource_MISC
Source: [email protected]
https://medium.com/%40jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5
x_refsource_MISCIssue TrackingThird Party Advisory
Source: [email protected]
https://news.ycombinator.com/item?id=20387298
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://twitter.com/moreati/status/1148548799813640193
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://twitter.com/zoom_us/status/1148710712241295361

CVSS

4.3MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-862

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card