Zoom Client Injection Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows and Zoom VDI Client version 5.15.2, which stemmed from a special element neutralization improper issue...

PT-2023-4700 · Zoom · Zoom Desktop Client For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.2 Zoom VDI Client versions prior to 5.15.2 Description: The issue exists due to improper neutralization of special elements, which may allow an unauthenticated user to enable an escalatio...

MAC User's unable to see shared screen in VDI during MS teams call

Issue Description: MAC users connected to Citrix VDI are experiencing problems with Teams optimization. While these users can attend meetings without issue, they are unable to view shared screens from other participants. Instead of seeing the shared content, they encounter a black screen...

CVE-2023-34120

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by t...

CVE-2023-28603

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

CVE-2023-28603

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

Improper access control

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

CVE-2023-34121

CVE-2023-34121 concerns Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients prior to 5.14.0. The vulnerability stems from improper input validation, potentially allowing an authenticated user to escalate privileges via network access. Public sources in the provided documents consis...

CVE-2023-28603

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

CVE-2023-28603

CVE-2023-28603 concerns the Zoom VDI client installer, with an improper access control flaw in versions prior to 5.14.0. The vulnerability could allow a malicious user to delete local files without proper permissions. Affected component: Zoom VDI client installer (pre-5.14.0). Root cause: imprope...

CVE-2023-28603

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

PT-2023-3427 · Zoom · Zoom For Windows +2

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Zoom Rooms for Windows versions prior to 5.14.0 Zoom VDI for Windows versions prior to 5.14.0 Description: The issue is related to improper privilege management, which may allow an authenticated user ...

PT-2023-24691 · Zoom · Zoom For Windows +3

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Zoom Rooms versions prior to 5.14.0 Zoom VDI Windows Meeting clients versions prior to 5.14.0 Description: The issue is related to improper input validation, which may allow an authenticated user to...

Citrix Cloud - VDI's are being created in wrong OU (default)

New issue reported over the past month where from time to time, newly created VDI's are being created in wrong OU default. In the console while creating the VDI, even when it is showing correct OU location, when creating new machines via the console , machines will be placed under default OU...

Windows 10 VDI Resolution Changed to 1600 from 1920 after Waking up Dell Wyse from Sleep Mode

Windows 10 VDI resolution changed to 1600 from 1920 after waking up Dell Wyse 3040 from sleep mode...

xorg-x11-server: XvdiSelectVideoNotify use-after-free

A vulnerability was found in X.Org. This flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding...

DLL Hijacking Vulnerability in ZTE Corporation uSmartView VDI McClient

ZTE Corporation is a leading global provider of integrated communications and information technology solutions. A DLL hijacking vulnerability exists in ZTE Corporation's uSmartView VDI McClient, which can be exploited by attackers to execute malicious code...

Zoom VDI Meeting Client < 5.13.1 Vulnerability (ZSB-23001)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.3., or the version of Zoom VDI isntalled on the remote host is prior to 5.13.1. It is, therefore, affected by a the Information Disclosure vulnerability as referenced in the ZSB-23001 advisory. - Zoom for Window...

Information disclosure

Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitte...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in Zoom Client versions prior to 5.13.3, Zoom Rooms for Windows clients versions prior to 5.13.5, and Zoom VDI for Windows clients versions prior to 5.13.1, whic...