Priority MEDIUM 48
A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03268 · Published 2021-11-24 · Fixed in 5.8.4, 5.8.1 +14 CWE-120
Priority MEDIUM 46
Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01447 · Published 2023-08-08 · Fixed in 5.15.2 CWE-176
Priority MEDIUM 46
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.0151 · Published 2022-10-31 · Fixed in 5.12.2 CWE-20
Priority MEDIUM 43
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00866 · Published 2022-08-11 · Fixed in 5.11.0, 5.10.7 CWE-20
Priority MEDIUM 42
Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00991 · Published 2023-12-13 · No fix listed CWE-426
Priority MEDIUM 40
Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local ac…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00246 · Published 2024-01-12 · Fixed in 5.16.0 CWE-266
Priority MEDIUM 40
Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00952 · Published 2023-06-13 · Fixed in 5.14.0 CWE-79
Priority LOW 39
Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0066 · Published 2023-11-14 · No fix listed CWE-939
Priority LOW 39
Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access.
CVSS 3.1HIGH 8.7· Local · Low privileges · No interaction · EPSS 0.00134 · Published 2023-06-13 · Fixed in 5.14.0 CWE-347
Priority LOW 39
Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability.
CVSS 3.1HIGH 8.3· Adjacent network · No auth · No interaction · EPSS 0.00521 · Published 2023-03-27 · Fixed in 5.13.5, 5.13.10 CWE-501
Priority LOW 36
Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01549 · Published 2023-08-08 · Fixed in 5.14.5 CWE-122
Priority LOW 36
A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01721 · Published 2021-11-24 · Fixed in 5.8.4, 5.8.1 +14 CWE-125
Priority LOW 35
Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01135 · Published 2023-11-14 · No fix listed CWE-120
Priority LOW 35
Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01063 · Published 2023-11-14 · No fix listed CWE-120
Priority LOW 35
Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network access.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00928 · Published 2023-11-14 · No fix listed CWE-789
Priority LOW 35
Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability.
CVSS 3.1HIGH 7.7· Local · Low privileges · No interaction · EPSS 0.00157 · Published 2023-06-13 · Fixed in 5.14.0 CWE-73
Priority LOW 35
Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00983 · Published 2023-03-16 · Fixed in 5.13.3, 5.13.1 CWE-200
Priority LOW 34
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.01245 · Published 2023-08-08 · Fixed in 5.14.10 CWE-449
Priority LOW 33
Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.01115 · Published 2023-09-12 · No fix listed CWE-449
Priority LOW 31
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access.
CVSS 3.1MEDIUM 6.1· Network · High privileges · User interaction · EPSS 0.01092 · Published 2023-08-08 · Fixed in 5.14.10 CWE-602
Priority LOW 30
Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00654 · Published 2023-11-14 · No fix listed CWE-449
Priority LOW 30
Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00855 · Published 2023-11-14 · No fix listed CWE-754
Priority LOW 30
Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00619 · Published 2023-11-14 · No fix listed CWE-325
Priority LOW 29
Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00403 · Published 2023-12-13 · No fix listed CWE-347
Priority LOW 24
Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0021 · Published 2023-11-14 · No fix listed CWE-426