3323 matches found
PT-2024-5135 · Zoom · Zoom
Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 6.0.0 Description: The issue is related to a race condition error in the installer for some Zoom Apps and SDKs for Windows, which may allow an authenticated user to conduct a privilege escalation via local access. This ...
PT-2024-5133 · Zoom · Zoom Workplace Desktop App
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Desktop App for macOS versions prior to 6.0.10 Description: The issue is related to an uncontrolled search path element in the installer, which may allow an authenticated user to conduct a denial of service via local access. Th...
PT-2024-5132 · Zoom · Zoom Workplace Apps +1
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps and SDKs for Windows affected versions not specified Description: The issue is related to improper privilege management in the installer for some Zoom Workplace Apps and SDKs for Windows. This may allow an authenticated us...
PT-2024-5176 · Zoom · Zoom Apps
Name of the Vulnerable Software and Affected Versions: Zoom Apps for Windows affected versions not specified Description: The issue is related to improper input validation in the installer for some Zoom Apps, which may allow an authenticated user to conduct a privilege escalation via local access...
PT-2024-5107 · Zoom · Zoom
Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to insufficient input validation in some Zoom Apps and SDKs, which may allow an authenticated user to conduct a denial of service via network access. This could potentiall...
PT-2024-5134 · Zoom · Zoom Sdks For Windows +1
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps and SDKs for Windows affected versions not specified Description: The issue is related to path traversal in Team Chat, which may allow an authenticated user to disclose information via network access. It is also associated...
PT-2024-5739 · Zoom · Zoom Workplace Sdks +1
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps and SDKs affected versions not specified Description: The issue is related to a protection mechanism failure in some Zoom Workplace Apps and SDKs, which may allow an authenticated user to conduct information disclosure via...
PT-2024-5738 · Zoom · Zoom Workplace Apps +1
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps and Rooms Clients affected versions not specified Description: The issue is related to a buffer overflow in the heap, which may allow an authenticated user to escalate their privileges via network access. This can be...
Ross Anderson’s Memorial Service
The memorial service for Ross Anderson will be held on Saturday, at 2:00 PM BST. People can attend remotely on Zoom. The passcode is "L3954FrrEF"...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: Im appearing on a panel on Society and Democracy at ACM Collective Intelligence in Boston, Massachusetts. The conference runs from June 26 through 29, 2024, and my panel is at 9:00 AM on Friday, June 28. Im speaking on "Reimagining...
Zoom Workplace Desktop App < 5.17.11 Divide By Zero Vulnerability (ZSB-24018)
The version of Zoom Workplace Desktop App installed on the remote host is prior to 5.17.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-24018 advisory. - Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service v...
PT-2025-7921 · Zoom · Zoom Sdks +1
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps and SDKs affected versions not specified Description: A use after free issue may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment, there is no information about ...
PT-2025-7920 · Zoom · Zoom Sdks +1
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps and SDKs affected versions not specified Description: A buffer overflow issue may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment, there is no information about...
Zoom Workplace VDI App for Windows Elevation of Privilege Vulnerability
Zoom Workplace VDI App for Windows is a client application designed for virtualized desktop environments such as Windows 365 Cloud PCs, supporting virtualization platforms such as Azure Virtual Desktop. An elevation of privilege vulnerability exists in the Zoom Workplace VDI App for Windows, whic...
The vulnerability of the `BaproductzoommagnifierZoomModuleFrontController::run()` method in the Best Zoom Magnifier Effect module – BAZoom Magnifier, a open-source e-commerce web application for PrestaShop. This vulnerability allows an attacker to elevate their privileges and gain access to read, modify, or delete data.
The vulnerability of the BaproductzoommagnifierZoomModuleFrontController::run method in the Best Zoom Magnifier Effect – BAZoom Magnifier web application for e-commerce with open-source PrestaShop is related to the lack of protective measures for the SQL query structure. Exploiting this...
Zoom Announces Advanced Encryption for Increased Meeting Security
By Deeba Ahmed Your Zoom meetings are now more secure than ever! This is a post from HackRead.com Read the original post: Zoom Announces Advanced Encryption for Increased Meeting Security...
Zoom Adopts NIST-Approved Post-Quantum End-to-End Encryption for Meetings
Popular enterprise services provider Zoom has announced the rollout of post-quantum end-to-end encryption E2EE for Zoom Meetings, with support for Zoom Phone and Zoom Rooms coming in the future. "As adversarial threats become more sophisticated, so does the need to safeguard user data," the compa...
CVE-2024-27244
Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access...
