Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Zoom Client for Meetings for Windows 5.10.0 Clear all filters
TI-2022-07035 CVE-2022-22786 · GHSA-678v-qchw-37jr

Update package downgrade in Zoom Client for Meetings for Windows

Priority MEDIUM 43

The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation version during the update process.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01528 Published 2022-05-18 Fixed in 5.10.0 CWE-494
TI-2022-07034 CVE-2022-22785 · GHSA-x5jg-c28r-h22h

Improperly constrained session cookies in Zoom Client for Meetings

Priority MEDIUM 45

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03517 Published 2022-05-18 Fixed in 5.10.0 CWE-565
TI-2022-07033 CVE-2022-22784 · GHSA-2894-36c8-f98v

Improper XML Parsing in Zoom Client for Meetings

Priority MEDIUM 42

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.04081 Published 2022-05-18 Fixed in 5.10.0 CWE-91