zoom Vulnerability Advisory Catalog

Total 231 security vulnerabilities recorded for zoom software and firmware.

← Back to All Vendors
Component: zoom_on-premise_meeting_connector_controller

A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310...

📅 2022-04-28
CVSS 6.5 Dossier →
Component: meetings

The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for ...

📅 2022-04-28
CVSS 7.9 Dossier →
Component: meetings

The Zoom Client for Meetings for MacOS (Standard and for IT Admin) prior to version 5.9.6 failed to properly check the package version during the upda...

📅 2022-04-28
CVSS 7.5 Dossier →
Component: meetings

The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6...

📅 2022-02-09
CVSS 4.7 Dossier →
Component: meetings

The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability in...

📅 2021-12-14
CVSS 4.7 Dossier →
Component: meetings

A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Mee...

📅 2021-11-24
CVSS 7.5 Dossier →
CVE-2021-34423 CRITICAL
Component: meetings

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Cl...

📅 2021-11-24
CVSS 9.8 Dossier →
Component: zoom_client_for_meetings

The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat exte...

📅 2021-11-11
CVSS 4.7 Dossier →
Component: zoom_client_for_meetings

In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a user...

📅 2021-11-11
CVSS 3.7 Dossier →
Component: zoom_on-premise_meeting_connector_controller

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR b...

📅 2021-11-11
CVSS 4.0 Dossier →
Component: zoom_on-premise_meeting_connector_controller

The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meeting...

📅 2021-11-11
CVSS 7.9 Dossier →
CVE-2021-34416 CRITICAL
Component: meeting_connector

The network address administrative settings web portal for the Zoom on-premise Meeting Connector before version 4.6.360.20210325, Zoom on-premise Meet...

📅 2021-09-27
CVSS 9.8 Dossier →
Component: meeting_connector

The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in ...

📅 2021-09-27
CVSS 7.5 Dossier →
Component: meeting_connector

The network proxy page on the web portal for the Zoom on-premise Meeting Connector Controller before version 4.6.348.20201217, Zoom on-premise Meeting...

📅 2021-09-27
CVSS 7.2 Dossier →
Component: zoom_plugin_for_microsoft_outlook

All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability duri...

📅 2021-09-27
CVSS 7.5 Dossier →
Component: meetings

During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer....

📅 2021-09-27
CVSS 7.8 Dossier →
Component: rooms

During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with ele...

📅 2021-09-27
CVSS 7.8 Dossier →
Component: zoom_plugin_for_microsoft_outlook

A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook for Mac before 5.0.25611.0521...

📅 2021-09-27
CVSS 7.8 Dossier →
Component: meetings

It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.2...

📅 2021-09-27
CVSS 7.8 Dossier →
Component: meetings

The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user durin...

📅 2021-09-27
CVSS 7.8 Dossier →
CVE-2021-33907 CRITICAL
Component: meetings

The Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate the certificate information used to sign .msi files w...

📅 2021-09-27
CVSS 9.8 Dossier →
Component: chat

Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary code without user interaction. An...

📅 2021-04-09
CVSS 8.5 Dossier →
Component: zoom

Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attempted to sh...

📅 2021-03-18
CVSS 4.3 Dossier →
Component: sharing_service

A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine ...

📅 2020-08-14
CVSS 7.8 Dossier →
Page 9 of 10 (231 Total Records)