CVE-2022-36927 Local Privilege Escalation in Zoom Rooms for macOS Clients

Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms for macOS clients versions prior to 5.11.3. An attacker can exploit the...

CVE-2022-36925

CVE-2022-36925 (Zoom Rooms for macOS) : Affected software is Zoom Rooms for macOS prior to version 5.11.4. The issue is an insecure key generation mechanism used for IPC between the Zoom Rooms daemon service and the Zoom Rooms client. The encryption key was generated using parameters that could b...

CVE-2022-36930 Local Privilege Escalation in Zoom Rooms for Windows Installers

Zoom Rooms for Windows installers before version 5.13.0 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain to escalate their privileges to the SYSTEM user...

CVE-2022-36930

CVE-2022-36930 affects Zoom Rooms for Windows installers prior to version 5.13.0. The vulnerability is a local privilege escalation allowing a low-privileged user to escalate to SYSTEM, via an attack chain described as an uncontrolled search path element. Exploitation is local with low complexity...

CVE-2022-36929 Local Privilege Escalation in Zoom Rooms for Windows Clients

The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user...

PT-2023-2184 · Zoom +1 · Zoom Rooms +3

Name of the Vulnerable Software and Affected Versions: Zoom for Windows clients versions 5.13.2 and earlier Zoom Rooms for Windows clients versions 5.13.4 and earlier Zoom VDI for Windows clients versions 5.13.0 and earlier Description: The issue is related to an information disclosure...

CVE-2022-36929 Local Privilege Escalation in Zoom Rooms for Windows Clients

The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user...

CVE-2022-36925 Insecure key generation for Zoom Rooms for macOS Clients

Zoom Rooms for macOS clients before version 5.11.4 contain an insecure key generation mechanism. The encryption key used for IPC between the Zoom Rooms daemon service and the Zoom Rooms client was generated using parameters that could be obtained by a local low-privileged application. That key ca...

CVE-2022-36928 Path Traversal in Zoom for Android Clients

Zoom for Android clients before version 5.13.0 contain a path traversal vulnerability. A third party app could exploit this vulnerability to read and write to the Zoom application data directory...

PT-2023-13510 · Zoom · Zoom Rooms For Macos

Name of the Vulnerable Software and Affected Versions: Zoom Rooms for macOS versions prior to 5.11.3 Description: A local privilege escalation issue allows a low-privileged user to gain root access. This can be exploited by a local user to escalate their privileges. Recommendations: For versions...

Zoom Rooms 信任管理问题漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms for macOS clients prior to version 5.11.4, which stems from the inclusion of...

CVE-2022-36928 Path Traversal in Zoom for Android Clients

Zoom for Android clients before version 5.13.0 contain a path traversal vulnerability. A third party app could exploit this vulnerability to read and write to the Zoom application data directory...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms for Windows installers versions prior to 5.13.0. An attacker could exploit t...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms Installer for Windows versions prior to 5.12.6. An attacker can exploit the...

CVE-2022-36926

Affected software: Zoom Rooms for macOS Vulnerability: Local privilege escalation in Zoom Rooms for macOS clients prior to version 5.11.3, enabling a low-privileged user to escalate to root. Root cause (per sources): Not explicitly detailed in the provided documents beyond the privilege escalatio...

PT-2023-13509 · Zoom · Zoom Rooms For Macos

Name of the Vulnerable Software and Affected Versions: Zoom Rooms for macOS versions prior to 5.11.4 Description: The issue concerns an insecure key generation mechanism in Zoom Rooms for macOS. Specifically, the encryption key used for Inter-Process Communication IPC between the Zoom Rooms daemo...

PT-2023-1098 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for Android versions prior to 5.13.0 Description: The issue is related to incorrect restriction of the path name to a directory with limited access, allowing a third-party app to exploit this and read and write to the Zoom application da...

PT-2023-1099 · Zoom · Zoom Rooms For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Rooms for Windows versions prior to 5.13.0 Description: The issue is related to an uncontrolled search path element in the Zoom video conferencing software. Exploitation of this issue could allow an attacker to elevate their privileges t...

Video Conferencing with Zoom < 4.0.10 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. 1. Insert the...