CVE-2024-27238: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access...

CVE-2024-39826: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access...

CVE-2024-39819: Download of Code Without Integrity Check

Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access...

CVE-2023-49647: Incorrect Privilege Assignment

Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2023-43586: Untrusted Search Path

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access...

PT-2023-28872

Name of the Vulnerable Software and Affected Versions Zoom Desktop Client for Windows affected versions not specified Zoom VDI Client for Windows affected versions not specified Zoom SDKs for Windows affected versions not specified Description The issue allows an authenticated user to conduct an...