ME
Product
Meetings
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 26Medium 5Low 2
Watch
Add Meetings to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-43582 | 8.8 | Nov 14 | Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2022-22786 | 8.8 | May 18 | The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation… Affected: before 5.10.0 |
| CVE-2022-22784 | 8.1 | May 18 | The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages Affected: before 5.10.0; before 5.10.0; before 5.10.0; before 5.10.0; before 5.10.0 |
| CVE-2023-28596 | 7.8 | Mar 27 | Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability Affected: before 5.13.5 |
| CVE-2023-22883 | 7.8 | Mar 16 | Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability Affected: before 5.13.5 |
| CVE-2022-28768 | 7.8 | Nov 17 | The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local privilege escalation vulnerability Affected: before 5.12.6 |
| CVE-2022-28762 | 7.8 | Oct 14 | Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOS Affected: 5.10.6 before 5.12.0 |
| CVE-2022-28757 | 7.8 | Aug 18 | The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process Affected: 5.7.3 before 5.11.6 |
| CVE-2022-28751 | 7.8 | Aug 17 | The Zoom Client for Meetings for MacOS (Standard and for IT Admin) before version 5.11.3 contains a vulnerability in the package signature validation during the update process Affected: before 5.11.3 |
| CVE-2022-28756 | 7.8 | Aug 15 | The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process Affected: 5.7.3 before 5.11.5 |
| CVE-2022-22788 | 7.8 | Jun 15 | The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed Affected: before 5.10.3 |
| CVE-2021-34412 | 7.8 | Sep 27 | During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer Affected: before 5.4.0 |
| CVE-2021-34409 | 7.8 | Sep 27 | It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.2.0, Zoom Client Plugin for… Affected: before 5.2.0 |
| CVE-2021-34408 | 7.8 | Sep 27 | The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the installation or update… Affected: before 5.3.2 |
| CVE-2020-11469 | 7.8 | Apr 1 | Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (with the user's… Affected: through 4.6.8 |
| CVE-2023-39206 | 7.5 | Nov 14 | Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-39204 | 7.5 | Nov 14 | Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access Affected: before 5.15.10; before 5.15.10; before 5.15.10; before 5.15.10; before 5.15.10 |
| CVE-2023-36539 | 7.5 | Jun 30 | Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information Affected: 5.15.0; 5.15.0; 5.15.0; 5.15.1 |
| CVE-2022-22787 | 7.5 | May 18 | The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request Affected: before 5.10.0; before 5.10.0; before 5.10.0; before 5.10.0; before 5.10.0 |
| CVE-2022-22781 | 7.5 | Apr 28 | The Zoom Client for Meetings for MacOS (Standard and for IT Admin) prior to version 5.9.6 failed to properly check the package version during the update process Affected: before 5.9.6 |
| CVE-2021-34424 | 7.5 | Nov 24 | A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for… Affected: before 5.8.3; before 5.8.4; before 5.8.4; before 5.8.4; before 5.8.4 |
| CVE-2020-11877 | 7.5 | Apr 17 | airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector (IV) for AES-256 CBC encryption Affected: 4.6.11 |
| CVE-2020-11876 | 7.5 | Apr 17 | airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of an OpenSSL EVP AES-256 CBC context Affected: 4.6.11 |
| CVE-2020-11500 | 7.5 | Apr 3 | Zoom Client for Meetings through 4.6.9 uses the ECB mode of AES for video and audio encryption Affected: through 4.6.9 |
| CVE-2022-28766 | 7.3 | Nov 17 | Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability Affected: before 5.12.6 |
| CVE-2022-22782 | 7.1 | Apr 28 | The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows… Affected: before 5.9.7 |
Showing 26