Vulnerabilities fixed in Zoom

🗓️ 15 Nov 2021 00:00:00Reported by NCSCType

Zoom fixed vulnerabilities in the client and connector, including a Windows Keybase flaw that could allow code execution and data access.

Reporter	Title	Published	Views	Family All 59
BDU FSTEC	The vulnerability of the Keybase open-source keyring client for Windows allows a hacker to execute arbitrary code.	4 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on Linux exists due to the lack of measures to neutralize specific elements, allowing a violator to execute arbitrary code.	6 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Zoom, a video conferencing software, relates to insufficient validation of entered data, allowing attackers to execute arbitrary code.	10 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Zoom’s video conferencing software, related to the handling of the zero pointer, allows a hacker to cause a service failure.	12 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings for Windows allows a perpetrator to compromise the integrity of protected information.	18 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Keybase’s open-source key catalog for iOS and Android clients stems from incomplete cleanup of temporary or auxiliary resources. This allows attackers to expose protected information or cause service failures.	21 Oct 202200:00	–	bdu_fstec
Circl	CVE-2021-34417	12 Nov 202102:38	–	circl
Circl	CVE-2021-34418	12 Nov 202102:38	–	circl
Circl	CVE-2021-34419	12 Nov 202102:38	–	circl
Circl	CVE-2021-34420	12 Nov 202102:38	–	circl

15 Nov 2021 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.9 - 9

CVSS 29

EPSS0.01338