CVE-2021-34415

The CVE-2021-34415 issue affects Zoom On-Premise Meeting Connector Controller (Zone Controller service) prior to version 4.6.358.20210205. The vulnerability stems from the service not validating the cnt field in incoming network packets, leading to resource exhaustion and a potential system crash...

CVE-2021-34414

CVE-2021-34414 affects Zoom on-premise components (Meeting Connector Controller, MMR, Recording Connector, Virtual Room Connector, and Load Balancer) prior to respective builds 4.6.348.20201217, 3.8.42.20200905, 4.4.6620.20201110, and 2.5.5495.20210326. The issue arises from a failure to validate...

CVE-2021-34414

The network proxy page on the web portal for the Zoom on-premise Meeting Connector Controller before version 4.6.348.20201217, Zoom on-premise Meeting Connector MMR before version 4.6.348.20201217, Zoom on-premise Recording Connector before version 3.8.42.20200905, Zoom on-premise Virtual Room...

CVE-2021-34412

CVE-2021-34412 affects Zoom Client for Meetings on Windows prior to 5.4.0. During installation, the installer can launch Internet Explorer, and if run with elevated privileges (e.g., via SCCM), this can result in local privilege escalation. The issue is documented across multiple sources (NVD ent...

CVE-2021-34412

During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

CVE-2021-34411

Technical details about CVE-2021-34411 are not publicly provided in the connected documents. The sources reiterate the same vulnerability description and do not specify affected versions beyond Zoom Rooms for Windows prior to 5.3.0. Monitor for updates.

CVE-2021-34411

During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

CVE-2021-34410

CVE-2021-34410 affects the Zoom Plugin for Microsoft Outlook for Mac (all versions prior to 5.0.25611.0521). The issue arises from a user-writable application bundle unpacked during installation, enabling local privilege escalation to root. The Connected documents confirm the product/component an...

CVE-2021-34410

A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook for Mac before 5.0.25611.0521 allows for privilege escalation to root...

CVE-2021-34409

The CVE-2021-34409 issue affects Zoom products on macOS: Zoom Client for Meetings (MacOS) pre-5.2.0, Zoom Client Plugin for Sharing iPhone/iPad pre-5.2.0, and Zoom Rooms for Conference pre-5.1.0. The vulnerability arises because installation packages copy pre- and post-installation shell scripts ...

CVE-2021-34409 Zoom Client Installer Local Privilege Escalation

It was discovered that the installation packages of the Zoom Client for Meetings for MacOS Standard and for IT Admin installation before version 5.2.0, Zoom Client Plugin for Sharing iPhone/iPad before version 5.2.0, and Zoom Rooms for Conference before version 5.1.0, copy pre- and post-...

CVE-2021-34408

The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the installation or update of the client. This could allow for potential privilege escalation if a link was created between the user writable...

CVE-2021-34408

The CVE affects Zoom Client for Meetings on Windows prior to 5.3.2. During installation/update, it writes log files to a user-writable directory as a privileged user, which could enable privilege escalation if that user-writable path links to a non-user-writable location. Affected product: Zoom C...

CVE-2021-33907

The Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate the certificate information used to sign .msi files when performing an update of the client. This could lead to remote code execution in an elevated privileged context...

CVE-2021-33907

CVE-2021-33907 affects Zoom Client for Meetings on Windows prior to 5.3.0. Root cause: the updater fails to properly validate the certificate information used to sign MSI files during an update, which could enable remote code execution in an elevated context. Impact stated as remote code executio...

ZOOM Zoom Client 信任管理问题漏洞

ZOOM Zoom Client is a video conferencing client application from Zoom ZOOM USA that supports multiple platforms. A security vulnerability exists in Zoom Client that arises from a lack of authentication measures or insufficient authentication strength in a networked system or product...

ZOOM on-premise Meeting Connector 输入验证错误漏洞

ZOOM on-premise Meeting Connector is a meeting connector from Zoom ZOOM USA. The ZOOM on-premise Meeting Connector suffers from an input validation error vulnerability that stems from an inability to validate inputs in a request sent to update a network configuration, which could lead to remote...

ZOOM on-premise Meeting Connector 输入验证错误漏洞

ZOOM on-premise Meeting Connector is a meeting connector from Zoom ZOOM USA. A security vulnerability exists in the Zoom on-premise Meeting Connector Controller that stems from the load balancer's inability to validate input sent in a request to update the web proxy configuration. An attacker cou...

ZOOM Zoom Client 安全漏洞

Zoom Client is a multi-platform video conferencing client application from Zoom ZOOM, a U.S. company. versions prior to Zoom Client for Meetings for MacOS 5.2.0 contain a security vulnerability that could be exploited to allow an attacker to escalate privileges to the root user...

PT-2021-20516 · Zoom · Zoom Client Plugin For Sharing +2

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings for MacOS versions prior to 5.2.0 Zoom Client Plugin for Sharing iPhone/iPad versions prior to 5.2.0 Zoom Rooms for Conference versions prior to 5.1.0 Description: A flaw was discovered in the installation packages of...