Medium severity4.7NVD Advisory· Published Nov 11, 2021· Updated Jun 17, 2026

CVE-2021-34420

Description

The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoom Video Communications, Inc./Zoom Client For Meetings
cpe:2.3:a:zoom:zoom_client_for_meetings:*:*:*:*:*:windows:*:*
Range: <5.4.4
Zoom Video Communications, Inc./Zoomllm-create
Range: <5.5.4
Zoom Video Communications, Inc./Client for Meetingsllm-create
Range: <5.5.4
Zoom Video Communications, Inc./Zoom Vdi Windows Meeting Clientcpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

explore.zoom.us/en/trust/security/security-bulletinnvdVendor Advisory
medium.com/manomano-tech/a-red-team-operation-leveraging-a-zero-day-vulnerability-in-zoom-80f57fb0822envdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000