CVE-2024-39818

CVE-2024-39818 affects Zoom Workplace Apps and SDKs. The issue is a protection mechanism failure that may allow an authenticated user to disclose information over the network. CVSSv3.1: base score 6.5 (MEDIUM) from NVD, with Confidentiality Impact: High, Attack Vector: Network, Attack Complexity:...

CVE-2024-39818 Zoom Workplace Apps and SDKs - Protection Mechanism Failure

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access...

CVE-2024-39825 Zoom Workplace Apps and Rooms Clients - Buffer Overflow

Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2024-39825

CVE-2024-39825 affects Zoom Workplace Apps and Rooms Clients. The issue is a heap-based buffer overflow that can allow an authenticated, remote attacker to escalate privileges over the network. Exploitation context: network access; no user interaction required; impact reported as high for confide...

CVE-2024-39825 Zoom Workplace Apps and Rooms Clients - Buffer Overflow

Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2024-42434: Missing Authorization

Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access...

PT-2024-29943

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description The issue allows a privileged user to conduct an information disclosure via network access. This affects some Zoom Workplace Apps, SDKs...

Zoom’s various products have security vulnerabilities

Zoom Rooms and others are products of Zoom Corporation, USA.Zoom Rooms is a software-based conferencing system.Zoom Meeting SDK is a development kit.Zoom Workplace is a desktop application software. A security vulnerability exists in a number of Zoom products. An attacker exploiting this...

CVE-2024-42438: Heap-based Buffer Overflow

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access...

CVE-2024-39822: Exposure of Sensitive Information to an Unauthorized Actor

Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access...

CVE-2024-39818: Insufficiently Protected Credentials

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access...

CVE-2024-42436: Heap-based Buffer Overflow

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access...

CVE-2024-39823: Missing Authorization

Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access...

CVE-2024-42437: Heap-based Buffer Overflow

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access...

CVE-2024-39825: Heap-based Buffer Overflow

Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2024-42435: Exposure of Sensitive Information to an Unauthorized Actor

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access...

CVE-2024-39824: Missing Authorization

Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access...

Zoom’s various products have security vulnerabilities

Zoom Rooms and others are products of Zoom Corporation, USA.Zoom Rooms is a software-based conferencing system.Zoom Meeting SDK is a development kit.Zoom Workplace is a desktop application software. A security vulnerability exists in a number of Zoom products. An attacker exploiting this...

httpd: Security issues via backend applications whose response headers are malicious or exploitable

A flaw was found in httpd. Backend applications whose response headers are malicious or exploitable may allow information disclosure, server-side request forgery SSRF or local script execution...

PT-2024-28684

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description The issue allows a privileged user to conduct an information disclosure via network access. This is a sensitive information disclosure...