zoom Vulnerability Advisory Catalog

Total 231 security vulnerabilities recorded for zoom software and firmware.

← Back to All Vendors
Component: zoom

Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privi...

📅 2023-07-11
CVSS 8.2 Dossier →
Component: meetings

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information....

📅 2023-06-30
CVSS 5.3 Dossier →
Component: meeting_sdk

Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denial of servi...

📅 2023-06-13
CVSS 4.3 Dossier →
Component: zoom

Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potentially ena...

📅 2023-06-13
CVSS 7.4 Dossier →
Component: rooms

Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to po...

📅 2023-06-13
CVSS 4.1 Dossier →
Component: virtual_desktop_infrastructure

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated ...

📅 2023-06-13
CVSS 8.7 Dossier →
Component: virtual_desktop_infrastructure

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files wit...

📅 2023-06-13
CVSS 7.7 Dossier →
Component: zoom

Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A malicious user may potentially ...

📅 2023-06-13
CVSS 2.8 Dossier →
Component: zoom

Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A maliciou...

📅 2023-06-13
CVSS 8.3 Dossier →
Component: zoom

Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to delete/replace Zoom Client fi...

📅 2023-06-13
CVSS 5.2 Dossier →
Component: zoom

Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leadin...

📅 2023-06-13
CVSS 4.3 Dossier →
Component: zoom

Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in a...

📅 2023-06-13
CVSS 7.5 Dossier →
Component: rooms

Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location a...

📅 2023-03-27
CVSS 8.3 Dossier →
Component: meetings

Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could ...

📅 2023-03-27
CVSS 7.8 Dossier →
Component: meetings

Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user coul...

📅 2023-03-16
CVSS 7.2 Dossier →
Component: zoom

Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom c...

📅 2023-03-16
CVSS 6.5 Dossier →
Component: zoom

Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom c...

📅 2023-03-16
CVSS 6.5 Dossier →
Component: rooms

Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 co...

📅 2023-03-16
CVSS 6.8 Dossier →
Component: rooms

Zoom Rooms for Windows installers before version 5.13.0 contain a local privilege escalation vulnerability. A local low-privileged user could exploit ...

📅 2023-01-09
CVSS 8.8 Dossier →
Component: rooms

The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit th...

📅 2023-01-09
CVSS 7.8 Dossier →
Component: zoom

Zoom for Android clients before version 5.13.0 contain a path traversal vulnerability. A third party app could exploit this vulnerability to read and ...

📅 2023-01-09
CVSS 6.1 Dossier →
Component: rooms

Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this ...

📅 2023-01-09
CVSS 8.8 Dossier →
Component: rooms

Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this ...

📅 2023-01-09
CVSS 8.8 Dossier →
Component: rooms

Zoom Rooms for macOS clients before version 5.11.4 contain an insecure key generation mechanism. The encryption key used for IPC between the Zoom Room...

📅 2023-01-09
CVSS 4.4 Dossier →
Page 7 of 10 (231 Total Records)