Browse CVEs

HIGH 7.5 CVE-2022-22783 A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.2022031… Zoom On Premise Meeting Connector Controller Mitigation only Fix from $1,9502022-04-28 HIGH 7.1 CVE-2022-22782 The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for… Meetings 5.9.6 / 5.9.7+ Fix from $1,9502022-04-28 MEDIUM 6.5 CVE-2022-22780 The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.… Meetings 5.6.3 / 5.7.3+ Fix from $1,6002022-02-09 MEDIUM 6.1 CVE-2021-34425 The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability i… Meetings 5.7.3+ Fix from $1,6002021-12-14 CRITICAL 9.8 CVE-2021-34423 A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom C… Meetings 5.0.1 / 5.7.6.1922+ Fix from $2,3002021-11-24 HIGH 7.5 CVE-2021-34424 A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Me… Meetings 5.0.1 / 5.7.6.1922+ Fix from $1,9502021-11-24 HIGH 7.4 CVE-2021-34420 The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat ext… Zoom Client For Meetings 5.4.4+ Fix from $1,9502021-11-11 HIGH 7.2 CVE-2021-34417 The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meetin… Zoom On Premise Meeting Connector Controller 2.5.5496.20210703 / 3.8.45.20210703+ Fix from $1,9502021-11-11 MEDIUM 5.3 CVE-2021-34418 The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR … Zoom On Premise Meeting Connector Controller 2.5.5492.20200616 / 3.8.42.20200905+ Fix from $1,6002021-11-11 MEDIUM 5.3 CVE-2021-34419 In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a use… Zoom Client For Meetings 5.1.0+ Fix from $1,6002021-11-11 CRITICAL 9.8 CVE-2021-33907 The Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate the certificate information used to sign .msi files … Meetings 5.3.0+ Fix from $2,3002021-09-27 CRITICAL 9.8 CVE-2021-34416 The network address administrative settings web portal for the Zoom on-premise Meeting Connector before version 4.6.360.20210325, Zoom on-premise Mee… Meeting Connector 2.5.5495.20210326 / 3.8.44.20210326+ Fix from $2,3002021-09-27 HIGH 7.8 CVE-2021-34408 The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user duri… Meetings 5.3.2+ Fix from $1,9502021-09-27 HIGH 7.8 CVE-2021-34409 It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.… Meetings 5.1.0 / 5.2.0+ Fix from $1,9502021-09-27 HIGH 7.8 CVE-2021-34410 A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook for Mac before 5.0.25611.052… Zoom Plugin For Microsoft Outlook 5.0.25611.0521+ Fix from $1,9502021-09-27 HIGH 7.8 CVE-2021-34411 During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with el… Rooms 5.3.0+ Fix from $1,9502021-09-27 HIGH 7.8 CVE-2021-34412 During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer… Meetings 5.4.0+ Fix from $1,9502021-09-27 HIGH 7.5 CVE-2021-34413 All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability dur… Zoom Plugin For Microsoft Outlook 5.3.52553.0918+ Fix from $1,9502021-09-27 HIGH 7.5 CVE-2021-34415 The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in… Meeting Connector 4.6.358.20210205+ Fix from $1,9502021-09-27 HIGH 7.2 CVE-2021-34414 The network proxy page on the web portal for the Zoom on-premise Meeting Connector Controller before version 4.6.348.20201217, Zoom on-premise Meetin… Meeting Connector 2.5.5495.20210326 / 3.8.42.20200905+ Fix from $1,9502021-09-27 HIGH 8.8 CVE-2021-30480EPSS 6% Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary code without user interaction. A… Chat after 2021-04-09 Fix from $1,9502021-04-09 HIGH 7.8 CVE-2020-9767 A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine… Sharing Service Mitigation only Fix from $1,9502020-08-14 HIGH 8.8 CVE-2020-6110 An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A… Zoom No fix yet Fix from $1,9502020-06-08 CRITICAL 9.8 CVE-2020-6109 An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted… Zoom No fix yet Fix from $2,3002020-06-08 HIGH 8.1 CVE-2020-11443 The Zoom IT installer for Windows (ZoomInstallerFull.msi) prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an update… It Installer 4.6.10+ Fix from $1,9502020-05-04 HIGH 7.5 CVE-2020-11877 airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector (IV) for AES-256 CBC encryption. NOTE: the vendor s… Meetings No fix yet Fix from $1,9502020-04-17 HIGH 7.5 CVE-2020-11876 airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of an OpenSSL EVP AES-256 CBC con… Meetings No fix yet Fix from $1,9502020-04-17 HIGH 7.5 CVE-2020-11500 Zoom Client for Meetings through 4.6.9 uses the ECB mode of AES for video and audio encryption. Within a meeting, all participants use a single 128-b… Meetings after 4.6.9 Fix from $1,9502020-04-03 HIGH 7.8 CVE-2020-11469 Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local p… Meetings after 4.6.8 Fix from $1,9502020-04-01 HIGH 8.8 CVE-2019-13567 The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon … Zoom 4.4.53932.0709+ Fix from $1,9502019-07-12