Zoom Client for Meetings < 5.15.0 Vulnerability (ZSB-23018)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.15.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23018 advisory. - Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user t...

The vulnerability of the Zoom Desktop software for Linux-based video conferencing systems, which stems from insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Zoom Desktop video conferencing software for Linux users stems from insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2023-39208

Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of service via network access...

The vulnerability of the Zoom Desktop for Windows video conferencing software for clients relates to the use of an insecure search path, allowing attackers to escalate their privileges.

The vulnerability of the Zoom Desktop for Windows video conferencing software-related software lies in the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Zoom Desktop software for Windows, a video conferencing application, stems from incorrect path restrictions for the access-controlled directory. This allows attackers to escalate their privileges.

The vulnerability of the Zoom Desktop video conferencing software for Windows clients is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Zoom Desktop for Windows video conferencing software in relation to insufficient data authentication checks allows attackers to exploit their privileges.

The vulnerability of the Zoom Desktop for Windows video conferencing software-related software lies in insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

CVE-2023-39209

Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access...

CVE-2023-39209

Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access...

CVE-2023-39213

Zoom Desktop Client for Windows and Zoom VDI Client prior to 5.15.2 are affected by CVE-2023-39213: improper neutralization of special elements allows an unauthenticated privilege escalation via network access. Mitigation: upgrade to version 5.15.2 or later (updates exist to 5.15.5 per security a...

CVE-2023-39216

Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-39216

Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

CVE-2023-36534

Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-36534

Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...

Input validation

Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-36540

CVE-2023-36540 affects Zoom Desktop Client for Windows prior to 5.14.5. The vulnerability arises from an untrusted search path in the installer, which may allow an authenticated local user to escalate privileges. Affected product/version: Zoom Desktop Client for Windows

PT-2023-4699 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.5 Description: The issue is related to improper input validation, which may allow an authenticated user to enable information disclosure via network access. This could potentially permit ...

Zoom Client Path Traversal Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.7, which stemmed from a path traversal issue...

Zoom Client Code Issue Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.5, which stemmed from an untrusted search path issue in the installer...

PT-2023-4962 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.14.7 Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to gain elevated privileges. This can potentially allow an unauthenticate...