ZO
Product
Zoom
64
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 29Low 1
Watch
Add Zoom to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-43586 | 8.8 | Dec 13 | Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via… Affected: before 5.16.5 |
| CVE-2023-43582 | 8.8 | Nov 14 | Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-36541 | 8.8 | Aug 8 | Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network… Affected: before 5.14.5 |
| CVE-2023-34116 | 8.8 | Jul 11 | Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access Affected: before 5.15.0 |
| CVE-2023-34121 | 8.8 | Jun 13 | Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an… Affected: before 5.14.0 |
| CVE-2020-6110 | 8.8 | Jun 8 | An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets Affected: 4.6.10 |
| CVE-2019-13567 | 8.8 | Jul 12 | The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450 Affected: before 4.4.53932.0709 |
| CVE-2017-15049 | 8.8 | Dec 19 | The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers… Affected: before 2.0.115900.1201 |
| CVE-2017-15048 | 8.8 | Dec 19 | Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the… Affected: before 2.0.115900.1201 |
| CVE-2023-39214 | 8.1 | Aug 8 | Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access Affected: before 5.15.5; before 5.15.5; before 5.15.5; before 5.15.5; before 5.15.5 |
| CVE-2024-27240 | 7.8 | Jul 15 | Zoom Apps for Windows - Improper Input Validation Affected: before 6.0.0 |
| CVE-2024-24694 | 7.8 | Apr 9 | Zoom Desktop Client for Windows - Improper Privilege Management Affected: before 5.7.10 |
| CVE-2024-24697 | 7.8 | Feb 13 | Zoom Clients - Untrusted Search Path Affected: before 5.17.0 |
| CVE-2023-49647 | 7.8 | Jan 12 | Zoom Desktop Client for Windows - Improper Access Control Affected: before 5.16.10 |
| CVE-2023-39211 | 7.8 | Aug 8 | Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via… Affected: before 5.15.5 |
| CVE-2023-36540 | 7.8 | Aug 8 | Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access Affected: before 5.14.5 |
| CVE-2023-28602 | 7.7 | Jun 13 | Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability Affected: before 5.13.5 |
| CVE-2023-39206 | 7.5 | Nov 14 | Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-39204 | 7.5 | Nov 14 | Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access Affected: before 5.15.10; before 5.15.10; before 5.15.10; before 5.15.10; before 5.15.10 |
| CVE-2023-39203 | 7.5 | Nov 14 | Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of… Affected: before 5.16.0 |
| CVE-2023-39208 | 7.5 | Sep 12 | Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of service via network access Affected: before 5.15.10 |
| CVE-2023-36532 | 7.5 | Aug 8 | Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access Affected: before 5.14.5; before 5.14.5; before 5.14.5; before 5.14.5; before 5.14.5 |
| CVE-2023-36539 | 7.5 | Jun 30 | Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information Affected: 5.15.0; 5.15.0; 5.15.0; 5.15.0; 5.15.0; 5.15.1 |
| CVE-2023-28597 | 7.5 | Mar 27 | Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability Affected: before 5.13.5; before 5.13.5; before 5.13.5; before 5.13.5; before 5.13.5 |
| CVE-2023-22882 | 7.5 | Mar 16 | Zoom clients before version 5.13.5 contain a STUN parsing vulnerability Affected: before 5.13.5 |
| CVE-2023-22881 | 7.5 | Mar 16 | Zoom clients before version 5.13.5 contain a STUN parsing vulnerability Affected: before 5.13.5 |
| CVE-2023-22880 | 7.5 | Mar 16 | Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information… Affected: before 5.13.3 |
| CVE-2022-36928 | 7.1 | Jan 9 | Zoom for Android clients before version 5.13.0 contain a path traversal vulnerability Affected: before 5.13.0 |
Showing 28