Vulnerability index

Browse CVEs

216 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Zoom On Premise Meeting Connector Controller HIGH 7.5
CVE-2022-22783

A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.2022031…

Mitigation only
Fix from $1,950 2022-04-28
Meetings HIGH 7.1
CVE-2022-22782

The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for…

Fix: 5.9.6 / 5.9.7+
Fix from $1,950 2022-04-28
Meetings MEDIUM 6.5
CVE-2022-22780

The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.…

Fix: 5.6.3 / 5.7.3+
Fix from $1,600 2022-02-09
Meetings MEDIUM 6.1
CVE-2021-34425

The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability i…

Fix: 5.7.3+
Fix from $1,600 2021-12-14
Meetings CRITICAL 9.8
CVE-2021-34423

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom C…

Fix: 5.0.1 / 5.7.6.1922+
Fix from $2,300 2021-11-24
Meetings HIGH 7.5
CVE-2021-34424

A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Me…

Fix: 5.0.1 / 5.7.6.1922+
Fix from $1,950 2021-11-24
Zoom Client For Meetings HIGH 7.4
CVE-2021-34420

The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat ext…

Fix: 5.4.4+
Fix from $1,950 2021-11-11
Zoom On Premise Meeting Connector Controller HIGH 7.2
CVE-2021-34417

The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meetin…

Fix: 2.5.5496.20210703 / 3.8.45.20210703+
Fix from $1,950 2021-11-11
Zoom On Premise Meeting Connector Controller MEDIUM 5.3
CVE-2021-34418

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR …

Fix: 2.5.5492.20200616 / 3.8.42.20200905+
Fix from $1,600 2021-11-11
Zoom Client For Meetings MEDIUM 5.3
CVE-2021-34419

In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a use…

Fix: 5.1.0+
Fix from $1,600 2021-11-11
Meetings CRITICAL 9.8
CVE-2021-33907

The Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate the certificate information used to sign .msi files …

Fix: 5.3.0+
Fix from $2,300 2021-09-27
Meeting Connector CRITICAL 9.8
CVE-2021-34416

The network address administrative settings web portal for the Zoom on-premise Meeting Connector before version 4.6.360.20210325, Zoom on-premise Mee…

Fix: 2.5.5495.20210326 / 3.8.44.20210326+
Fix from $2,300 2021-09-27
Meetings HIGH 7.8
CVE-2021-34408

The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user duri…

Fix: 5.3.2+
Fix from $1,950 2021-09-27
Meetings HIGH 7.8
CVE-2021-34409

It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.…

Fix: 5.1.0 / 5.2.0+
Fix from $1,950 2021-09-27
Zoom Plugin For Microsoft Outlook HIGH 7.8
CVE-2021-34410

A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook for Mac before 5.0.25611.052…

Fix: 5.0.25611.0521+
Fix from $1,950 2021-09-27
Rooms HIGH 7.8
CVE-2021-34411

During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with el…

Fix: 5.3.0+
Fix from $1,950 2021-09-27
Meetings HIGH 7.8
CVE-2021-34412

During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer…

Fix: 5.4.0+
Fix from $1,950 2021-09-27
Zoom Plugin For Microsoft Outlook HIGH 7.5
CVE-2021-34413

All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability dur…

Fix: 5.3.52553.0918+
Fix from $1,950 2021-09-27
Meeting Connector HIGH 7.5
CVE-2021-34415

The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in…

Fix: 4.6.358.20210205+
Fix from $1,950 2021-09-27
Meeting Connector HIGH 7.2
CVE-2021-34414

The network proxy page on the web portal for the Zoom on-premise Meeting Connector Controller before version 4.6.348.20201217, Zoom on-premise Meetin…

Fix: 2.5.5495.20210326 / 3.8.42.20200905+
Fix from $1,950 2021-09-27
Chat HIGH 8.8
CVE-2021-30480EPSS 6%

Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary code without user interaction. A…

Fix: after 2021-04-09
Fix from $1,950 2021-04-09
Sharing Service HIGH 7.8
CVE-2020-9767

A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine…

Mitigation only
Fix from $1,950 2020-08-14
Zoom HIGH 8.8
CVE-2020-6110

An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A…

No fix yet
Fix from $1,950 2020-06-08
Zoom CRITICAL 9.8
CVE-2020-6109

An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted…

No fix yet
Fix from $2,300 2020-06-08
It Installer HIGH 8.1
CVE-2020-11443

The Zoom IT installer for Windows (ZoomInstallerFull.msi) prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an update…

Fix: 4.6.10+
Fix from $1,950 2020-05-04
Meetings HIGH 7.5
CVE-2020-11877

airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector (IV) for AES-256 CBC encryption. NOTE: the vendor s…

No fix yet
Fix from $1,950 2020-04-17
Meetings HIGH 7.5
CVE-2020-11876

airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of an OpenSSL EVP AES-256 CBC con…

No fix yet
Fix from $1,950 2020-04-17
Meetings HIGH 7.5
CVE-2020-11500

Zoom Client for Meetings through 4.6.9 uses the ECB mode of AES for video and audio encryption. Within a meeting, all participants use a single 128-b…

Fix: after 4.6.9
Fix from $1,950 2020-04-03
Meetings HIGH 7.8
CVE-2020-11469

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local p…

Fix: after 4.6.8
Fix from $1,950 2020-04-01
Zoom HIGH 8.8
CVE-2019-13567

The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon …

Fix: 4.4.53932.0709+
Fix from $1,950 2019-07-12