CVE-2023-36540

CVE-2023-36540 affects Zoom Desktop Client for Windows prior to 5.14.5. The vulnerability arises from an untrusted search path in the installer, which may allow an authenticated local user to escalate privileges. Affected product/version: Zoom Desktop Client for Windows

Zoom Client Path Traversal Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.7, which stemmed from a path traversal issue...

Zoom Client Code Issue Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.5, which stemmed from an untrusted search path issue in the installer...

Zoom Client Data Forgery Issue Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.5, which stemmed from an insufficient data authenticity validation issue...

CVE-2023-39211: Improper Verification of Cryptographic Signature

Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access...

CVE-2023-36540: Untrusted Search Path

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36541: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

PT-2023-4699 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.5 Description: The issue is related to improper input validation, which may allow an authenticated user to enable information disclosure via network access. This could potentially permit ...

PT-2023-4962 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.14.7 Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to gain elevated privileges. This can potentially allow an unauthenticate...

Zoom Client Input Validation Error Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.15.5, which stemmed from an improper input validation issue...

PT-2023-4692 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.14.5 Description: The issue is related to an untrusted search path in the installer, which may allow an authenticated user to enable an escalation of privilege via local access. This could...

PT-2023-4647

Name of the Vulnerable Software and Affected Versions Zoom Desktop Client for Windows versions prior to 5.14.7 Description The issue is related to path traversal in the Zoom Desktop Client for Windows, which may allow an unauthenticated user to enable an escalation of privilege via network access...

PT-2023-4700 · Zoom · Zoom Desktop Client For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.2 Zoom VDI Client versions prior to 5.15.2 Description: The issue exists due to improper neutralization of special elements, which may allow an unauthenticated user to enable an escalatio...

PT-2023-4648

Name of the Vulnerable Software and Affected Versions Zoom Desktop Client for Windows versions prior to 5.14.5 Description The issue is related to insufficient verification of data authenticity. This may allow an authenticated user to enable an escalation of privilege via network access. The...

Microsoft Teams Security Vulnerability

Microsoft Teams is a software from Microsoft USA for online meetings, chat, and cloud storage capabilities. A security vulnerability exists in Microsoft Teams. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected: Microsoft Teams...

CVE-2023-39213: Improper Handling of Unicode Encoding

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-39209: The UI Performs the Wrong Action

Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access...

CVE-2023-39216: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...

Zoom Client Injection Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows and Zoom VDI Client version 5.15.2, which stemmed from a special element neutralization improper issue...

CVE-2023-36534: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...