CVE-2023-36534

CVE-2023-36534 describes a path traversal vulnerability in Zoom Desktop Client for Windows prior to version 5.14.7, allowing an unauthenticated attacker to escalate privileges via network access. The issue affects the Zoom Desktop Client on Windows and is exploited through path traversal, enablin...

CVE-2023-36533

Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-36533

CVE-2023-36533 affects Zoom Client SDKs prior to 5.14.7, where an unauthenticated actor could trigger uncontrolled resource consumption over the network to cause a denial of service. Public details across connected sources confirm the vulnerability in Zoom SDK components and identify the affected...

CVE-2023-36533

Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-36532

Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-36532

Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-36532

CVE-2023-36532 : Zoom Client for Meetings (Windows/macOS/Linux) is affected if prefix versions are before 5.14.5. The issue is a buffer overflow in Zoom Clients that can be triggered by unsanitized input over the network, allowing an unauthenticated remote user to cause a denial of service. The a...

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

CVE-2023-36541

CVE-2023-36541 affects Zoom Desktop Client for Windows prior to 5.14.5. The issue is described as insufficient verification of data authenticity, enabling an authenticated user to escalate privileges via network access. Affected component: Zoom Desktop Client for Windows (Windows builds before 5....

CVE-2023-36540

CVE-2023-36540 affects Zoom Desktop Client for Windows prior to 5.14.5. The vulnerability arises from an untrusted search path in the installer, which may allow an authenticated local user to escalate privileges. Affected product/version: Zoom Desktop Client for Windows

CVE-2023-36540

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36540

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

Zoom Client Security Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in the Zoom Client SDK prior to version 5.15.5 that stems from an issue with the exposure of sensitive information...

Zoom Client Injection Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows and Zoom VDI Client version 5.15.2, which stemmed from a special element neutralization improper issue...

Zoom Client Security Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.7, which stemmed from an improper input validation issue...

PT-2023-5591 · Zoom · Zoom Client Sdk

Name of the Vulnerable Software and Affected Versions: Zoom Client SDK versions prior to 5.15.5 Description: The issue is related to insufficient protection of service data, which may allow a remote attacker to gain unauthorized access to protected information. It involves exposure of sensitive...

Zoom Client SDK Security Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client SDKs prior to version 5.14.7 that stems from an uncontrolled resource consumption issue...

Zoom Client Buffer Error Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Clients prior to version 5.14.5 that stems from a buffer overflow issue...

PT-2023-26835 · Zoom · Zoom Sdks

Name of the Vulnerable Software and Affected Versions: Zoom SDK versions prior to 5.14.10 Description: The issue is related to improper input validation in the Zoom SDK, which may allow an unauthenticated user to enable a denial of service via network access. Recommendations: For versions prior t...