CVE-2024-42439: Untrusted Search Path

Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access...

Zoom多款产品 安全漏洞

Zoom Rooms and others are products of Zoom Corporation, USA.Zoom Rooms is a software-based conferencing system.Zoom Meeting SDK is a development kit.Zoom Workplace is a desktop application software. A security vulnerability exists in a number of Zoom products. An attacker exploiting this...

PT-2024-28683 · Zoom · Zoom Sdks +3

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description: The issue allows an authenticated user to conduct an information disclosure via network access. This is due to sensitive information...

PT-2024-29946 · Zoom · Zoom Sdks +3

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description: A buffer overflow issue may allow an authenticated user to conduct a denial of service via network access. This issue affects some Zo...

PT-2024-28684

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description The issue allows a privileged user to conduct an information disclosure via network access. This is a sensitive information disclosure...

PT-2024-28685

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description The issue allows a privileged user to conduct an information disclosure via network access. This is related to sensitive information...

Celebrating Excellence: Rapid7 Recognized in Newsweek's Greatest Workplaces in America 2024

In a testament to its commitment to fostering an exceptional workplace environment, Rapid7 is proud to be included in Newsweek's Greatest Workplaces in America for 2024. This recognition not only underscores Rapid7's dedication to its people, but also cements its standing among companies that...

Zoom Workplace Desktop App For Windows < 6.0.0 Race Condition (ZSB-24021)

The version of Zoom Workplace Desktop App for Windows installed on the remote host is prior to 6.0.0. It is, therefore, affected by a race condition vulnerability that allow a local authenticated attacker to conduct a privilege escalation via local access. Note that Nessus has not tested for this...

Zoom Workplace Desktop App < 6.0.0 Improper Input Validation (ZSB-24020)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.0.0. It is, therefore, affected by a improper input validation vulnerability that allow a local authenticated attacker to conduct a denial of service via network access. Note that Nessus has not tested for this...

Zoom Workplace Desktop App For Windows < 6.0.0 Path Traversal (ZSB-24023)

The version of Zoom Workplace Desktop App for Windows installed on the remote host is prior to 6.0.0. It is, therefore, affected by a path traversal vulnerability that allow a local authenticated attacker to conduct information disclosure via network access. Note that Nessus has not tested for th...

CVE-2024-39827

Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-39826

Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access...

CVE-2024-39827

Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-39819

Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access...

CVE-2024-39821

Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-39819

Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access...

CVE-2024-39820

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-39821 Zoom Workplace App for Windows and Zoom Rooms App for Windows - Race Condition

Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-39820

CVE-2024-39820 affects Zoom Workplace Desktop App for macOS prior to version 6.0.10. The issue is an uncontrolled search path element in the installer, enabling an authenticated local attacker to cause a denial of service via local access. A fixed version is 6.0.10 or later; remediation is to upg...

CVE-2024-39819 Zoom Workplace Apps and SDK for Windows - Improper Privilege Management

Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access...