CVE-2019-13450

In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerab...

Zoom Client for Meetings < 4.4.5 Vulnerability (ZSB-19002)

The version of Zoom Client for Meetings installed on the remote host is prior to 4.4.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-19002 advisory. - A vulnerability in the macOS Zoom and RingCentral clients could allow a remote, unauthenticated attacker to force a user...

KLA11799 Security vulnerability in Zoom

Security vulnerability was found in Zoom. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories Zoom Security CVE-2019-13450 CVE-2019-13450 Exploitation Malware exists for this vulnerability. Usually such malware is...

CVE-2019-13450

CVE-2019-13450 affects Zoom Client for macOS up to version 4.4.4 (and RingCentral 7.0.136380.0312) where any web site can interact with the local Zoom Web server on localhost ports 19421/19424, allowing a remote attacker to force a user to join a video call with the camera active. Root cause: ins...

Zoom Client Information Disclosure (Webcam) CVE-2019-13450

In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerab...