CVE-2023-28600

Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to delete/replace Zoom Client files potentially causing a loss of integrity and availability to the Zoom Client...

CVE-2023-28600

CVE-2023-28600 affects Zoom Client on macOS prior to 5.14.0. The issue is improper access control that could allow a local attacker to delete or replace Zoom Client files, potentially compromising integrity and availability. Supported details indicate the impact is loss of integrity/availability ...

CVE-2023-28600

Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to delete/replace Zoom Client files potentially causing a loss of integrity and availability to the Zoom Client...

CVE-2023-28599

Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leading a victim to a malicious website during meeting creation...

CVE-2023-28599

Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leading a victim to a malicious website during meeting creation...

CVE-2023-28599

CVE-2023-28599 affects Zoom Client prior to 5.13.10. An HTML injection in the user’s display name could redirect victims to a malicious website during meeting creation. Root cause: HTML injection in display name handling. Impact: potential unauthorized navigation to attacker-controlled content; c...

CVE-2023-28598

Zoom Client for Linux versions prior to 5.13.10 are affected by an HTML-injection vulnerability that can crash the Zoom application when a user initiates a chat with a malicious contact. The issue is documented across multiple sources (official Zoom security bulletin, Red Hat advisory, OpenVAS/Ne...

CVE-2023-28598

Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in a Zoom application crash...

CVE-2023-28598

Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in a Zoom application crash...

PT-2023-21838 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.13.10 Description: The issue allows a malicious user to inject HTML into their display name, potentially leading a victim to a malicious website during meeting creation. This occurs when a malicious user manipulates...

Vulnerabilities fixed in Zoom

Zoom has fixed vulnerabilities in the Zoom client for Windows and macOS. A malicious party could exploit the vulnerabilities to cause a denial-of-service, to grant themselves elevated privileges granted or gain access to sensitive information. Zoom has released updates to fix the vulnerabilities ...

PT-2023-3755 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.14.0 Description: The issue is related to an improper restriction of operations within the bounds of a memory buffer, which can be exploited by a remote attacker to execute arbitrary code. This can potentially cause...

PT-2023-3427 · Zoom · Zoom For Windows +2

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Zoom Rooms for Windows versions prior to 5.14.0 Zoom VDI for Windows versions prior to 5.14.0 Description: The issue is related to improper privilege management, which may allow an authenticated user ...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients versions prior to...

PT-2023-24686 · Zoom · Zoom Meeting Sdk

Name of the Vulnerable Software and Affected Versions: Zoom Meeting SDK versions prior to 5.13.0 Description: The issue is related to a buffer copy without checking the size of the input, which may allow an authenticated user to potentially enable a denial of service via local access. This can...

PT-2023-21837 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for Linux clients versions prior to 5.13.10 Description: The issue is related to an HTML injection vulnerability. If a victim starts a chat with a malicious user, it could result in a Zoom application crash. Recommendations: For versions...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom for Windows, Zoom for MacOS clients versions prior to 5.14.0. An attacker exploited the vulnerability to cause information disclosure...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients versions prior to...

PT-2023-21839 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for MacOS versions prior to 5.14.0 Description: The issue is related to improper access control, which could allow a malicious user to delete or replace Zoom Client files. This could potentially cause a loss of integrity and availability...

Zoom Client 缓冲区错误漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom for Windows clients prior to version 5.14.0, which stems from an incorrect operation limit in the memory buffer...