CVE-2019-13450

In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerab...

CVE-2019-13449

In the Zoom Client before 4.4.2 on macOS, remote attackers can cause a denial of service continual focus grabs via a sequence of invalid launch?action=join= requests to localhost port 19421...

CVE-2019-13567

The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon aka the hidden web server is running, but the Zoom Client is not installed or can't be opened, an attacker can remotely execute code with a...

CVE-2019-16273

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge adb, leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the...

Zoom Client for Meetings < 6.3.10 Insecure Default Variable Initialization Vulnerability (ZSB-25014)

The version of Zoom Client for Meetings installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25014 advisory. - Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to...

Zoom Client for Meetings < 6.3.10 Vulnerability (ZSB-25015)

The version of Zoom Client for Meetings installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25015 advisory. - Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of...

CVE-2020-6110

An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially crafted chat message can cause an arbitrary binary planting which could be abused to achieve arbitrary code execution. An attacker needs ...

CVE-2020-6109

An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat message can cause an arbitrary file write, which could potentially be abused to achieve arbitrary code execution. An attacker needs to send a...

CVE-2024-27247

Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client versions prior to 5.17.10 that stems from improper privilege management and could allow authenticated users to escalate privileges via local access...

Zoom Client for Meetings < 5.17.10 Vulnerability (ZSB-24013)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.17.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-24013 advisory. - Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduc...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client versions prior to 5.17.10 that stems from improper privilege management and could allow privileged users to escalate privileges via local access...

Zoom Client for Meetings < 5.17.10 Vulnerability (ZSB-24012)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.17.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-24012 advisory. - Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a...

Zoom Client for Meetings < 5.17.0 Vulnerability (ZSB-24004)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.17.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-24004 advisory. - Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of...

Zoom Client for Meetings < 5.16.5 Vulnerability (ZSB-24006)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24006 advisory. - Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network...

Zoom Client for Meetings < 5.17.0 Vulnerability (ZSB-24005)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.17.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-24005 advisory. - Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via loc...

Zoom Client for Meetings < 5.16.5 Vulnerability (ZSB-24008)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24008 advisory. - Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for...

Zoom Client for Meetings < 5.16.5 Vulnerability (ZSB-23062)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23062 advisory. - Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial ...

Zoom Client for Meetings < 5.16.10 Vulnerability (ZSB-24001)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-24001 advisory. - Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows...

Zoom Client for Meetings < 5.16.5 Vulnerability (ZSB-24007)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24007 advisory. - Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via netwo...