CVE-2023-39213

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-39213

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access...

Zoom Client Injection Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows and Zoom VDI Client version 5.15.2, which stemmed from a special element neutralization improper issue...

PT-2023-4700 · Zoom · Zoom Desktop Client For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.2 Zoom VDI Client versions prior to 5.15.2 Description: The issue exists due to improper neutralization of special elements, which may allow an unauthenticated user to enable an escalatio...

CVE-2023-39213: Improper Handling of Unicode Encoding

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access...

MAC User's unable to see shared screen in VDI during MS teams call

Issue Description: MAC users connected to Citrix VDI are experiencing problems with Teams optimization. While these users can attend meetings without issue, they are unable to view shared screens from other participants. Instead of seeing the shared content, they encounter a black screen...

CVE-2023-34120

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by t...

CVE-2023-28603

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

CVE-2023-28603

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

Improper access control

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

CVE-2023-34121

CVE-2023-34121 concerns Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients prior to 5.14.0. The vulnerability stems from improper input validation, potentially allowing an authenticated user to escalate privileges via network access. Public sources in the provided documents consis...

CVE-2023-28603

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

CVE-2023-28603

CVE-2023-28603 concerns the Zoom VDI client installer, with an improper access control flaw in versions prior to 5.14.0. The vulnerability could allow a malicious user to delete local files without proper permissions. Affected component: Zoom VDI client installer (pre-5.14.0). Root cause: imprope...

CVE-2023-28603

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

PT-2023-24691 · Zoom · Zoom For Windows +3

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Zoom Rooms versions prior to 5.14.0 Zoom VDI Windows Meeting clients versions prior to 5.14.0 Description: The issue is related to improper input validation, which may allow an authenticated user to...

CVE-2023-28603: External Control of File Name or Path

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

PT-2023-3427 · Zoom · Zoom For Windows +2

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Zoom Rooms for Windows versions prior to 5.14.0 Zoom VDI for Windows versions prior to 5.14.0 Description: The issue is related to improper privilege management, which may allow an authenticated user ...

CVE-2023-34120: Improper Verification of Cryptographic Signature

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by t...

CVE-2023-34121: Improper Neutralization of Input During Web Page Generation

Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access...

Citrix Cloud - VDI's are being created in wrong OU (default)

New issue reported over the past month where from time to time, newly created VDI's are being created in wrong OU default. In the console while creating the VDI, even when it is showing correct OU location, when creating new machines via the console , machines will be placed under default OU...