Vulnerabilities fixed in Zoom products

🗓️ 14 Feb 2024 00:00:00Reported by NCSCType

Zoom fixed vulnerabilities in Windows Desktop Client, VDI Client, and Meeting SDK; one allows unauthenticated privilege escalation, others require authentication or user interaction.

Reporter	Title	Published	Views	Family All 91
BDU FSTEC	The vulnerability of Zoom’s video conferencing software, related to errors in processing input data, allows attackers to exploit their privileges.	19 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Zoom’s video conferencing software, related to deficiencies in authentication procedures, allows attackers to disclose protected information.	10 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Meeting Chat component of Zoom’s video conferencing software, which allows a intruder to disclose protected information	10 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Zoom’s video conferencing software relates to the use of an unreliable search path, which allows attackers to escalate their privileges.	10 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Zoom’s video conferencing software, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.	10 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Meeting Chat component of Zoom’s video conferencing software for Windows operating systems allows a intruder to disclose protected information.	10 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Zoom’s video conferencing software, related to insufficient validation of input data, allows attackers to disclose sensitive information that should be protected.	12 Apr 202400:00	–	bdu_fstec
Circl	CVE-2024-24690	14 Feb 202401:21	–	circl
Circl	CVE-2024-24691	14 Feb 202401:21	–	circl
Circl	CVE-2024-24695	14 Feb 202401:21	–	circl

14 Feb 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 3.19.6 - 9.8

EPSS0.00331

SSVC