Browse CVEs

MEDIUM 5.5 CVE-2023-39212 Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access. Rooms 5.15.5+ Fix from $1,6002023-08-08 MEDIUM 6.5 CVE-2023-39209 Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via ne… Zoom 5.15.5+ Fix from $1,6002023-08-08 CRITICAL 9.8 CVE-2023-39216 Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via… Zoom 5.14.7+ Fix from $2,3002023-08-08 HIGH 7.5 CVE-2023-39217 Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access. Meeting Software Development Kit 5.14.10+ Fix from $1,9502023-08-08 CRITICAL 9.8 CVE-2023-36534 Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network ac… Zoom 5.14.7+ Fix from $2,3002023-08-08 HIGH 8.8 CVE-2023-36541 Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalati… Zoom 5.14.5+ Fix from $1,9502023-08-08 HIGH 7.8 CVE-2023-36540 Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of p… Zoom 5.14.5+ Fix from $1,9502023-08-08 HIGH 7.5 CVE-2023-36533 Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access. Meeting Software Development Kit 5.14.7+ Fix from $1,9502023-08-08 MEDIUM 6.5 CVE-2023-36535 Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via n… Rooms 5.14.10+ Fix from $1,6002023-08-08 HIGH 7.5 CVE-2023-36532 Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. Rooms 5.14.5+ Fix from $1,9502023-08-08 HIGH 7.8 CVE-2023-36536 Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of pr… Rooms 5.15.0+ Fix from $1,9502023-07-11 HIGH 7.8 CVE-2023-36537 Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege vi… Rooms 5.14.5+ Fix from $1,9502023-07-11 HIGH 7.8 CVE-2023-36538 Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via loca… Rooms 5.15.0+ Fix from $1,9502023-07-11 HIGH 7.8 CVE-2023-34118 Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege vi… Rooms 5.14.5+ Fix from $1,9502023-07-11 HIGH 7.8 CVE-2023-34119 Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of … Rooms 5.15.0+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-34116 Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of priv… Zoom 5.15.0+ Fix from $1,9502023-07-11 HIGH 7.5 CVE-2023-36539 Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information. Meetings No fix yet Fix from $1,9502023-06-30 MEDIUM 6.5 CVE-2023-34114 Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potentially en… Zoom 5.14.10+ Fix from $1,6002023-06-13 HIGH 8.8 CVE-2023-34121 Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to p… Rooms 5.14.0+ Fix from $1,9502023-06-13 HIGH 7.8 CVE-2023-34120 Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated… Virtual Desktop Infrastructure 5.14.0+ Fix from $1,9502023-06-13 HIGH 7.7 CVE-2023-28602 Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A malicious user may potentially… Zoom 5.13.5+ Fix from $1,9502023-06-13 HIGH 7.1 CVE-2023-28603 Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files wi… Virtual Desktop Infrastructure 5.14.0+ Fix from $1,9502023-06-13 MEDIUM 6.5 CVE-2023-28601 Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicio… Zoom 5.14.0+ Fix from $1,6002023-06-13 MEDIUM 5.4 CVE-2023-28600 Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to delete/replace Zoom Client f… Zoom 5.14.0+ Fix from $1,6002023-06-13 MEDIUM 6.5 CVE-2023-28598 Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in … Zoom 5.13.10+ Fix from $1,6002023-06-13 HIGH 7.8 CVE-2023-28596 Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could… Meetings 5.13.5+ Fix from $1,9502023-03-27 HIGH 7.5 CVE-2023-28597 Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location … Rooms 5.13.5 / 5.13.10+ Fix from $1,9502023-03-27 HIGH 7.8 CVE-2023-22883 Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user cou… Meetings 5.13.5+ Fix from $1,9502023-03-16 HIGH 7.5 CVE-2023-22882 Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom … Zoom 5.13.5+ Fix from $1,9502023-03-16 HIGH 7.5 CVE-2023-22880 Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 c… Rooms 5.13.1 / 5.13.3+ Fix from $1,9502023-03-16