CVE-2022-36929

CVE-2022-36929 affects Zoom Rooms Installer for Windows prior to 5.12.6. The vulnerability is a local privilege escalation during the install process, enabling a low-privileged user to gain SYSTEM authority. The connected sources confirm the affected software and the root cause as an installer-ti...

Zoom Client 路径遍历漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client versions prior to 5.13.0. An attacker can exploit this vulnerability to read and write the Zoom application data directory...

PT-2023-2184 · Zoom +1 · Zoom Rooms +3

Name of the Vulnerable Software and Affected Versions: Zoom for Windows clients versions 5.13.2 and earlier Zoom Rooms for Windows clients versions 5.13.4 and earlier Zoom VDI for Windows clients versions 5.13.0 and earlier Description: The issue is related to an information disclosure...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms Installer for Windows versions prior to 5.12.6. An attacker can exploit the...

CVE-2022-36927 Local Privilege Escalation in Zoom Rooms for macOS Clients

Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...

PT-2023-1098 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for Android versions prior to 5.13.0 Description: The issue is related to incorrect restriction of the path name to a directory with limited access, allowing a third-party app to exploit this and read and write to the Zoom application da...

PT-2023-1099 · Zoom · Zoom Rooms For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Rooms for Windows versions prior to 5.13.0 Description: The issue is related to an uncontrolled search path element in the Zoom video conferencing software. Exploitation of this issue could allow an attacker to elevate their privileges t...

Video Conferencing with Zoom < 4.0.10 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. PoC 1. Insert...

Video Conferencing with Zoom < 4.0.10 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. 1. Insert the...

Zoom Client for Meetings < 5.6.3 Vulnerability (ZSB-22002)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.6.3. It is, therefore, affected by a vulnerability as referenced in the ZSB-22002 advisory. - The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions...

Zoom Client for Meetings < 5.8.4 Vulnerability (ZSB-21019)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.8.4. It is, therefore, affected by a vulnerability as referenced in the ZSB-21019 advisory. - A buffer overflow vulnerability was discovered in the products listed in the Affected Products'' section of this bulleti...

Zoom Client for Meetings < 5.10.0 Vulnerability (ZSB-22007)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.10.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-22007 advisory. - The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.10.0 fails to properly...

Zoom Client for Meetings < 5.1.0 Vulnerability (ZSB-21015)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.1.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-21015 advisory. - In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a...

Zoom Client for Meetings 4.1.27507.0627 < 4.4.52595.0425 Vulnerability (ZSB-19003)

The version of Zoom Client for Meetings installed on the remote host is between 4.1.27507.0627 and 4.4.52595.0425. It is, therefore, affected by a vulnerability as referenced in the ZSB-19003 advisory. - A vulnerability in the Zoom macOS client could allow an attacker to download malicious softwa...

Zoom Client for Meetings < 5.2.0 Vulnerability (ZSB-21005)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.2.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-21005 advisory. - It was discovered that the installation packages of the Zoom Client for Meetings for macOS Standard and for IT Admin...

Zoom Client for Meetings < 4.1.34475.1105 Vulnerability (ZSB-18001)

The version of Zoom Client for Meetings installed on the remote host is prior to 4.1.34475.1105. It is, therefore, affected by a vulnerability as referenced in the ZSB-18001 advisory. - A vulnerability in the Zoom client could allow a remote, unauthenticated attacker to control meeting...

Zoom Client for Meetings 5.7.3 < 5.11.5 Vulnerability (ZSB-22018)

The version of Zoom Client for Meetings installed on the remote host is between 5.7.3 and 5.11.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-22018 advisory. - The Zoom Client for Meetings for macOS Standard and for IT Admin starting with version 5.7.3 and before 5.11.5...

Zoom Client for Meetings < 5.8.6 Vulnerability (ZSB-22002)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.8.6. It is, therefore, affected by a vulnerability as referenced in the ZSB-22002 advisory. - The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions...

Zoom Client for Meetings < 5.10.0 Vulnerability (ZSB-22009)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.10.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-22009 advisory. - The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.10.0 fails to properly valida...

Zoom Client for Meetings < 5.7.3 Vulnerability (ZSB-22002)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.7.3. It is, therefore, affected by a vulnerability as referenced in the ZSB-22002 advisory. - The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions...