Vulnerabilities fixed in Zoom

🗓️ 07 Sep 2023 00:00:00Reported by NCSCType

Zoom fixed vulnerabilities in Zoom and Zoom Rooms with update 5.15.5; denial of service unauthenticated, data access and elevation require authentication.

Reporter	Title	Published	Views	Family All 158
BDU FSTEC	The vulnerability of Zoom’s video conferencing software, related to the implementation of security features at the client side, allows attackers to gain unauthorized access to protected information.	31 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Zoom Desktop software for Windows, a video conferencing application, stems from incorrect path restrictions for the access-controlled directory. This allows attackers to escalate their privileges.	31 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Zoom Desktop for Windows video conferencing software in relation to insufficient data authentication checks allows attackers to exploit their privileges.	31 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Zoom SDK software for conducting video conferences, related to uncontrolled resource consumption, allows a hacker to cause a service failure.	4 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Zoom video conferencing service, which stems from insufficient validation of input data, allows attackers to access protected information.	4 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Zoom video conferencing service, which exists due to the lack of measures to neutralize special elements, allows a violator to increase their privileges.	4 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Zoom video conferencing service, related to insecure management of privileges, allows a malicious actor to gain unauthorized access to protected information.	4 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Zoom video conferencing service relates to the use of an unreliable search path, which allows a malicious actor to cause a service failure.	4 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Zoom video conferencing service, related to insufficient validation of input data, allows attackers to escalate their privileges.	13 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Zoom’s video conferencing software lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.	3 Oct 202300:00	–	bdu_fstec

07 Sep 2023 00:00Current

7High risk

Vulners AI Score7

CVSS 3.19.6 - 9.8

EPSS0.01392

SSVC