CVE-2024-39822 Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure

Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access...

CVE-2024-39818

CVE-2024-39818 affects Zoom Workplace Apps and SDKs. The issue is a protection mechanism failure that may allow an authenticated user to disclose information over the network. CVSSv3.1: base score 6.5 (MEDIUM) from NVD, with Confidentiality Impact: High, Attack Vector: Network, Attack Complexity:...

Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability

Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0. This advisory also provides guidance on what developers can do to update their...

PT-2024-28683 · Zoom · Zoom Sdks +3

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description: The issue allows an authenticated user to conduct an information disclosure via network access. This is due to sensitive information...

CVE-2024-39819

CVE-2024-39819 covers a privilege-escalation issue in the Windows installer for Zoom Workplace Apps and SDKs. The root cause is an integrity check within the installer that may allow an authenticated user with local access to elevate privileges. Documents consistently describe this as a local, au...

CVE-2024-39826 Zoom Workplace Apps and SDKs - Path traversal

Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access...

CVE-2024-27238 Zoom Apps and SDKs - Race Condition

Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access...

CVE-2024-27238

CVE-2024-27238 concerns a race condition in the Windows installer for Zoom products (Zoom Apps and SDKs) prior to version 6.0.0 that may allow a locally authenticated user to escalate privileges. Multiple sources describe the issue as a local race condition affecting Zoom components installed on ...

CVE-2024-27241 Zoom Apps and SDKs - Improper Input Validation

Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access...

CVE-2024-27241

CVE-2024-27241 corresponds to an improper input validation flaw affecting Zoom Apps and SDKs. The connected Nessus entry specifies Zoom Workplace Desktop App

PT-2024-5132 · Zoom · Zoom Workplace Apps +1

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps and SDKs for Windows affected versions not specified Description: The issue is related to improper privilege management in the installer for some Zoom Workplace Apps and SDKs for Windows. This may allow an authenticated us...

PT-2024-5134 · Zoom · Zoom Sdks For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps and SDKs for Windows affected versions not specified Description: The issue is related to path traversal in Team Chat, which may allow an authenticated user to disclose information via network access. It is also associated...

.NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2024-21409 | .NET Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 7.0 ,and .NET 8.0. This advisory also provides guidance on what developers can do t...

Top 3 API Leaks Identified by Cybersecurity & InfoSec Experts

APIs Application Programming Interfaces have proliferated widely, which increases their susceptibility to various vulnerabilities. In the realm of web applications, prime examples that stand out are SOAP Simple Object Access Protocol and Representational State Transfer REST APIs. Due to their...

Fedora: Security Advisory for ldapjdk (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zoom Client for Meetings < 5.16.10 Vulnerability (ZSB-24001)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-24001 advisory. - Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows...

Improper access control

Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2023-43583

Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow a privileged user to conduct a disclosure of information via network access...

Information disclosure

Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow a privileged user to conduct a disclosure of information via network access...

GHSA-3QF9-QXFJ-4WHC Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 6.0. This advisory also provides guidance on what developers can do to update thei...