The vulnerability of the Zoom video conferencing service, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the Zoom video conferencing service is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Zoom video conferencing service, which stems from insufficient validation of input data, allows attackers to access protected information.

The vulnerability of the Zoom video conferencing service exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerability of the Zoom video conferencing service, which exists due to the lack of measures to neutralize special elements, allows a violator to increase their privileges.

The vulnerability of the Zoom video conferencing service exists due to the lack of measures taken to neutralize certain elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges...

CVE-2023-39218

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access...

CVE-2023-36535

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access...

PT-2023-4646 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.14.10 Description: The issue is related to the client-side enforcement of server-side security in Zoom clients, which may allow an authenticated user to enable information disclosure via network access. This could...

The vulnerability of Zoom video conferencing software, related to the disclosure of information in erroneous data fields, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Zoom video conferencing software is related to the exposure of information in the erroneous data area. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of Zoom’s video conferencing software lies in the insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of Zoom’s video conferencing software relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2023-24685 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Description: The issue is related to insufficient verification of data authenticity, which may allow an authenticated user to potentially enable an escalation of privilege via network access...

CVE-2023-28602

Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A malicious user may potentially downgrade Zoom Client components to previous versions...

CVE-2023-28601

Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicious user may alter protected Zoom Client memory buffer potentially causing integrity issues within the Zoom Client...

The vulnerability of Zoom’s video conferencing software relates to breaches of confidentiality when connecting to an SMB server. This allows a perpetrator to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of Zoom video conferencing software is related to the violation of confidentiality boundaries when connecting to an SMB server. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information or execute arbitrary code...

CVE-2023-28597

Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the victim client could set up a malicious...

CVE-2023-22883 Local Privilege Escalation in Zoom for Windows Installers

Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the installation process to escalate their privileges to the SYSTEM user...

PT-2023-2061 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.13.5 Description: The issue is related to an improper trust boundary implementation when connecting to an SMB server. This could allow a remote attacker to gain unauthorized access to protected information or execute...

The vulnerability of Zoom video conferencing software relates to an uncontrolled search path element, allowing attackers to elevate their privileges to that of the SYSTEM user.

The vulnerability of Zoom video conferencing software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to elevate their privileges to that of the SYSTEM user...

The vulnerability of Zoom’s video conferencing software relates to synchronization errors when using shared resources, allowing attackers to execute arbitrary code with system privileges.

The vulnerability of Zoom’s video conferencing software is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code with system privileges...

PT-2023-2184 · Zoom +1 · Zoom Rooms +3

Name of the Vulnerable Software and Affected Versions: Zoom for Windows clients versions 5.13.2 and earlier Zoom Rooms for Windows clients versions 5.13.4 and earlier Zoom VDI for Windows clients versions 5.13.0 and earlier Description: The issue is related to an information disclosure...

The vulnerability of the Zoom video conferencing service, related to improper handling of code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Zoom video conferencing service is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Vulnerability fixed in Zoom

A vulnerability has been fixed in Zoom. The vulnerability allows a local malicious party to gain access to sensitive data, such as meeting data and chat messages sent during meetings. This is caused by a combination of insufficient cleaning of the data after the meeting is closed and the use of a...