Zoom Client Input Validation Error Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. An input validation error vulnerability exists in Zoom Client versions prior to 5.15.10, which stems from the presence of incorrect input validation that could allow an unauthenticated user to...

Zoom Client Code Issue Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A code issue vulnerability exists in Zoom Client that stems from the presence of an untrusted search path that could allow a privileged user to escalate privileges via local access...

Vulnerabilities fixed in Zoom

Zoom has fixed vulnerabilities in the clients of Zoom and Zoom Rooms. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, gain access to system data or cause a denial-of-service. To cause a Denial-of-Service, the malicious party does not need prior...

The vulnerability of the Zoom Desktop for Windows video conferencing software for clients relates to the use of an insecure search path, allowing attackers to escalate their privileges.

The vulnerability of the Zoom Desktop for Windows video conferencing software-related software lies in the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Zoom video conferencing service, which stems from insufficient validation of input data, allows attackers to access protected information.

The vulnerability of the Zoom video conferencing service exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerability of the Zoom video conferencing service, which exists due to the lack of measures to neutralize special elements, allows a violator to increase their privileges.

The vulnerability of the Zoom video conferencing service exists due to the lack of measures taken to neutralize certain elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges...

The vulnerability of the Zoom SDK software for conducting video conferences, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of Zoom, a video conferencing software, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Zoom video conferencing service, related to insecure management of privileges, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Zoom video conferencing service is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Zoom video conferencing service relates to the use of an unreliable search path, which allows a malicious actor to cause a service failure.

The vulnerability of the Zoom video conferencing service is related to the use of an unreliable search path. Exploiting this vulnerability could allow a hacker to cause a service failure...

The vulnerability of Zoom’s video conferencing software, related to the implementation of security features at the client side, allows attackers to gain unauthorized access to protected information.

The vulnerability of Zoom, a video conferencing software, is related to the implementation of security features at the client side. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Zoom Desktop software for Windows, a video conferencing application, stems from incorrect path restrictions for the access-controlled directory. This allows attackers to escalate their privileges.

The vulnerability of the Zoom Desktop video conferencing software for Windows clients is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Zoom Desktop for Windows video conferencing software in relation to insufficient data authentication checks allows attackers to exploit their privileges.

The vulnerability of the Zoom Desktop for Windows video conferencing software-related software lies in insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Zoom Can Spy on Your Calls and Use the Conversation to Train AI, But Says That It Won’t

This is why we need regulation: Zoom updated its Terms of Service in March, spelling out that the company reserves the right to train AI on user data with no mention of a way to opt out. On Monday, the company said in a blog post that theres no need to worry about that. Zoom execs swear the compa...

A week in security (August 7 - August 13)

Last week on Malwarebytes Labs: Zoom clarifies user consent requirement when training its AI Several hospitals still counting the cost of widespread ransomware attack Old exploit kits still kicking around in 2023 YouTube makes sweeping changes to tackle spam on Shorts videos Googles "browse...

Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping

Multiple security vulnerabilities have been disclosed in AudioCodes desk phones and Zoom's Zero Touch Provisioning ZTP that could be potentially exploited by a malicious attacker to conduct remote attacks. "An external attacker who leverages the vulnerabilities discovered in AudioCodes Ltd.'s des...

Zoom clarifies user consent requirement when training its AI

Changes in the terms of service TOS of the Zoom video-conferencing software have caused some turmoil. Since the pandemic, Zoom Video Conferencing has become a household name. Zoom came up as the big winner in the video conferencing struggle that enabled us to work from home. Now that things are...

Using Machine Learning to Detect Keystrokes

Researchers have trained a ML model to detect keystrokes by sound with 95% accuracy. "A Practical Deep Learning-Based Acoustic Side Channel Attack on Keyboards" Abstract: With recent developments in deep learning, the ubiquity of microphones and the rise in online services via personal devices,...

Zoom Client for Meetings < 5.14.10 Vulnerability (ZSB-23031)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-23031 advisory. - Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enab...

Zoom Client < 5.14.10 Multiple Information Disclosure Vulnerabilities (ZSB-23031, ZSB-23034) - Linux

Zoom Client is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Zoom Client < 5.14.5 Multiple Privilege Escalation Vulnerabilities (ZSB-23026, ZSB-23027) - Windows

Zoom Client is prone to multiple privilege escalation vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"...