CVE-2023-39218

Zoom Client for Meetings versions before 5.14.10 are affected by CVE-2023-39218 due to client-side enforcement of server-side security that may allow information disclosure via network access. The impact is confidentiality disclosure as noted in sources; exploitation status is not detailed in the...

CVE-2023-39217

Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-39217

Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-39217

The CVE-2023-39217 issue affects the Zoom SDK prior to version 5.14.10, caused by improper input validation in the SDK, enabling an unauthenticated attacker to trigger a denial of service over the network. Existence and details are supported by multiple connected documents, including PT-2023-2683...

CVE-2023-39216

Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-39216

Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-39216

CVE-2023-39216 affects the Zoom Desktop Client for Windows prior to 5.14.7. The issue is due to improper input validation that may allow an unauthenticated user to achieve privilege escalation via network access. Documents consistently identify this as a high-severity, client-side vulnerability w...

CVE-2023-36535

CVE-2023-36535 affects Zoom Client for Meetings prior to 5.14.10. The issue arises from client-side enforcement of server-side security, potentially allowing an authenticated user to disclose information via network access. Zoom has released fixes; NCSC notes this vulnerability is addressed in Zo...

CVE-2023-36535

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access...

CVE-2023-36535

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access...

CVE-2023-36534

CVE-2023-36534 describes a path traversal vulnerability in Zoom Desktop Client for Windows prior to version 5.14.7, allowing an unauthenticated attacker to escalate privileges via network access. The issue affects the Zoom Desktop Client on Windows and is exploited through path traversal, enablin...

CVE-2023-36534

Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-36534

Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...

CVE-2023-36533

Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-36533

Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-36533

CVE-2023-36533 affects Zoom Client SDKs prior to 5.14.7, where an unauthenticated actor could trigger uncontrolled resource consumption over the network to cause a denial of service. Public details across connected sources confirm the vulnerability in Zoom SDK components and identify the affected...

CVE-2023-36532

Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-36532

Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-36532

CVE-2023-36532 : Zoom Client for Meetings (Windows/macOS/Linux) is affected if prefix versions are before 5.14.5. The issue is a buffer overflow in Zoom Clients that can be triggered by unsanitized input over the network, allowing an unauthenticated remote user to cause a denial of service. The a...

CVE-2023-36541

CVE-2023-36541 affects Zoom Desktop Client for Windows prior to 5.14.5. The issue is described as insufficient verification of data authenticity, enabling an authenticated user to escalate privileges via network access. Affected component: Zoom Desktop Client for Windows (Windows builds before 5....