Zoom Patches Critical Windows Flaw That Could Enable Account Takeover

Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover. The vulnerability, tracked as CVE-2026-53412 CVSS score: 9.8, affects Zoom Workplace for Windows before version 7.0.0 and Zoom Workplace VDI Client for...

EUVD-2023-38217

Malicious code in bioql PyPI...

EUVD-2024-22095

Malicious code in bioql PyPI...

EUVD-2024-39626

Malicious code in bioql PyPI...

CVE-2024-42439

Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access...

CVE-2024-42439

Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access...

CVE-2024-42440

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access...

CVE-2024-42439

CVE-2024-42439 affects Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS prior to 6.1.0. The root cause is an untrusted search path in the installer, which may allow a local, privileged user to escalate privileges. Affected products: Zoom Workplace Desktop App for macOS (pre-6.1...

Zoom多款产品 安全漏洞

Zoom Rooms and others are products of Zoom Corporation, USA.Zoom Rooms is a software-based conferencing system.Zoom Meeting SDK is a development kit.Zoom Workplace is a desktop application software. A security vulnerability exists in several Zoom products. An attacker could exploit the...

CVE-2024-24691 Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

Zoom's multiple product security vulnerabilities

Zoom Meeting SDK and Zoom VDI Client are both products of Zoom Corporation, U.S.A. Zoom Meeting SDK is a development kit. Enables your company to accelerate the development and build of fully customizable video-based applications by leveraging the performance, scale, and reliability of Zoom's...

Vulnerabilities fixed in Zoom products

Zoom has fixed vulnerabilities in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows. A malicious party could exploit the vulnerabilities to gain access to sensitive data, grant themselves elevated permissions, or to cause a denial-of-service. To cause ...

PT-2024-2687 · Zoom · Zoom Desktop Client For Windows +2

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows affected versions not specified Zoom VDI Client for Windows affected versions not specified Zoom Meeting SDK for Windows affected versions not specified Description: The issue is related to improper input...

CVE-2023-34115

Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the Zoom Meeting SDK to crash and need to be restarted...

Buffer overflow

Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the Zoom Meeting SDK to crash and need to be restarted...

CVE-2023-34115

CVE-2023-34115 affects Zoom Meeting SDK prior to 5.13.0. The root cause is a buffer copy performed without checking the input size in the SDK, which may allow an authenticated user to trigger a denial-of-service by locally crashing the Zoom Meeting SDK and requiring a restart. Documents consisten...

CVE-2023-34115

Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the Zoom Meeting SDK to crash and need to be restarted...

PT-2023-24686 · Zoom · Zoom Meeting Sdk

Name of the Vulnerable Software and Affected Versions: Zoom Meeting SDK versions prior to 5.13.0 Description: The issue is related to a buffer copy without checking the size of the input, which may allow an authenticated user to potentially enable a denial of service via local access. This can...

CVE-2021-34423

A buffer overflow vulnerability was discovered in Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.8.4, Zoom Client for Meetings for Blackberry for Android and iOS before version 5.8.1, Zoom Client for Meetings for intune for Android and iOS before version...