Design/Logic Flaw

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access...

Input validation

Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access...

Design/Logic Flaw

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access...

Design/Logic Flaw

Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access...

CVE-2023-39209

CVE-2023-39209 affects Zoom Desktop Client for Windows prior to 5.15.5. The issue is improper input validation in the Windows client that may allow an authenticated user to disclose information over the network. The vulnerability is labeled with confidentiality impact HIGH and exploit potential r...

CVE-2023-39209

Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access...

CVE-2023-39209

Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access...

CVE-2023-39214

The CVE-2023-39214 entry concerns Zoom Client SDK before version 5.15.5, where an authenticated user may exploit a network-access vulnerability to cause a denial of service and potential exposure of sensitive information. Publicly documented details from OpenVAS listings corroborate the affected ...

CVE-2023-39214

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access...

CVE-2023-39213

Zoom Desktop Client for Windows and Zoom VDI Client prior to 5.15.2 are affected by CVE-2023-39213: improper neutralization of special elements allows an unauthenticated privilege escalation via network access. Mitigation: upgrade to version 5.15.2 or later (updates exist to 5.15.5 per security a...

CVE-2023-39213

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-39213

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-39212

Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access...

CVE-2023-39212

Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access...

CVE-2023-39212

CVE-2023-39212 affects Zoom Rooms for Windows prior to 5.15.5. The issue is an untrusted search path that may allow an authenticated user to trigger a denial of service via local access. Public advisories indicate Zoom fixed the vulnerability in version 5.15.5. Exploitation details are not provid...

CVE-2023-39211

Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access...

CVE-2023-39211

CVE-2023-39211 affects Zoom Desktop Client for Windows and Zoom Rooms for Windows prior to 5.15.5. The issue is described as improper privilege management that may allow an authenticated user to enable an information disclosure via local access. According to connected sources, upgrading to versio...

CVE-2023-39211

Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access...

CVE-2023-39210

Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an information disclosure via local access...

CVE-2023-39210

CVE-2023-39210 affects the Zoom Client SDK for Windows (before 5.15.0). The issue is cleartext storage of sensitive information that can lead to information disclosure via local access by an authenticated user. Impact is confidentiality (high); impact to integrity/availability not indicated. Reme...