CVE-2023-28598

Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in a Zoom application crash...

CVE-2023-28598

Zoom Client for Linux versions prior to 5.13.10 are affected by an HTML-injection vulnerability that can crash the Zoom application when a user initiates a chat with a malicious contact. The issue is documented across multiple sources (official Zoom security bulletin, Red Hat advisory, OpenVAS/Ne...

编号撤回

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. This CVE number has been withdrawn...

PT-2023-21837 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for Linux clients versions prior to 5.13.10 Description: The issue is related to an HTML injection vulnerability. If a victim starts a chat with a malicious user, it could result in a Zoom application crash. Recommendations: For versions...

PT-2023-3755 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.14.0 Description: The issue is related to an improper restriction of operations within the bounds of a memory buffer, which can be exploited by a remote attacker to execute arbitrary code. This can potentially cause...

Zoom Client for Meetings < 5.14.10 Vulnerability (ZSB-23016)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-23016 advisory. - Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an...

Zoom Client for Meetings < 5.14.0 Vulnerability (ZSB-23015)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23015 advisory. - Insufficient verification of data authenticity in Zoom for Windows clients before 5.14.0 may allow an authenticated use...

Zoom Client for Meetings < 5.13.10 Vulnerability (ZSB-23007)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-23007 advisory. - Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their...

PT-2023-3427 · Zoom · Zoom For Windows +2

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Zoom Rooms for Windows versions prior to 5.14.0 Zoom VDI for Windows versions prior to 5.14.0 Description: The issue is related to improper privilege management, which may allow an authenticated user ...

PT-2023-24691 · Zoom · Zoom For Windows +3

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Zoom Rooms versions prior to 5.14.0 Zoom VDI Windows Meeting clients versions prior to 5.14.0 Description: The issue is related to improper input validation, which may allow an authenticated user to...

Zoom Client 缓冲区错误漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom for Windows clients prior to version 5.14.0, which stems from an incorrect operation limit in the memory buffer...

PT-2023-21840 · Zoom · Zoom Vdi Client

Name of the Vulnerable Software and Affected Versions: Zoom VDI client installer versions prior to 5.14.0 Description: The issue is related to improper access control, allowing a malicious user to potentially delete local files without proper permissions. Recommendations: For versions prior to...

PT-2023-24686 · Zoom · Zoom Meeting Sdk

Name of the Vulnerable Software and Affected Versions: Zoom Meeting SDK versions prior to 5.13.0 Description: The issue is related to a buffer copy without checking the size of the input, which may allow an authenticated user to potentially enable a denial of service via local access. This can...

Zoom VDI client installer 安全漏洞

Zoom VDI client installer is a client installer from Zoom USA. A security vulnerability exists in Zoom VDI client installer versions prior to 5.14.0 that stems from incorrect access control. An attacker can exploit the vulnerability to delete local files without proper privileges...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom for MacOS clients versions prior to 5.14.0 that stems from improper access control. An attacker exploiting this vulnerability could delete or replace Zoom...

Zoom Meeting SDK 安全漏洞

The Zoom Meeting SDK is a development kit from Zoom USA, Inc. enabling your company to accelerate the development and build fully customizable video-based applications by leveraging the performance, scale and reliability of Zoom's industry-leading video-first communications platform. A security...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients versions prior to...

Zoom Client for Meetings < 5.13.10 Vulnerability (ZSB-23006)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-23006 advisory. - Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a...

Zoom Client for Meetings < 5.14.0 Vulnerability (ZSB-23008)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23008 advisory. - Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to...

PT-2023-21838 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.13.10 Description: The issue allows a malicious user to inject HTML into their display name, potentially leading a victim to a malicious website during meeting creation. This occurs when a malicious user manipulates...