3323 matches found
Information disclosure
Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A malicious user may potentially downgrade Zoom Client components to previous versions...
Input validation
Improper input validation in the installer for Zoom for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access...
Improper access control
Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...
Input validation
Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by t...
Input validation
Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access...
Authorization
Insufficient verification of data authenticity in Zoom for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access...
Improper access control
Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to delete/replace Zoom Client files potentially causing a loss of integrity and availability to the Zoom Client...
CVE-2023-34113
CVE-2023-34113 is rejected/not used; duplicate of CVE-2023-36541.
CVE-2023-34122
Concerning CVE-2023-34122 (duplicate of CVE-2023-36540), the connected sources provide concrete details for Zoom Desktop Client for Windows before version 5.14.5. The flaw is an untrusted search path in the installer that may allow an authenticated user to escalate privileges via local access. Im...
CVE-2023-34121
Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access...
CVE-2023-34121
Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access...
CVE-2023-34121
CVE-2023-34121 concerns Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients prior to 5.14.0. The vulnerability stems from improper input validation, potentially allowing an authenticated user to escalate privileges via network access. Public sources in the provided documents consis...
CVE-2023-34120
CVE-2023-34120 affects Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows prior to 5.14.0. The issue is improper privilege management that could let an authenticated user spawn processes with escalated privileges via local access. Impacts include potential elevation of privilege w...
CVE-2023-34120
Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by t...
CVE-2023-34120
Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by t...
CVE-2023-28603
CVE-2023-28603 concerns the Zoom VDI client installer, with an improper access control flaw in versions prior to 5.14.0. The vulnerability could allow a malicious user to delete local files without proper permissions. Affected component: Zoom VDI client installer (pre-5.14.0). Root cause: imprope...