Is CVE-2024-27442 actively exploited?

No active exploitation of CVE-2024-27442 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-27442 be exploited remotely?

No. CVE-2024-27442 requires local access to exploit.

What is the CVSS score of CVE-2024-27442?

CVE-2024-27442 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2024-27442

HIGH

CVE-2024-27442

CWE-755Published: August 12, 2024· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The zmmailboxdmgr binary, a component of ZCS, is intended to be executed by the zimbra user with root privileges for specific mailbox operations. However, an attacker can escalate privileges from the zimbra user to root, because of improper handling of input arguments. An attacker can execute arbitrary commands with elevated privileges, leading to local privilege escalation.

NVD Source

Technical Analysis

CVE-2024-27442 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.