CVE-2021-34423

CVE-2021-34423 describes a buffer overflow in Zoom products (client and MMR server components) due to insecure deserialization of a blob in the Zoom messaging path. The issue arises when deserializing packets where a length field is read to allocate a buffer, then a second length is read and used...

CVE-2022-22782

CVE-2022-22782 affects Zoom client lines on Windows: Zoom Client for Meetings < 5.9.7, Zoom Rooms for Conference Room < 5.10.0, Zoom Plugins for Outlook < 5.10.3, and Zoom VDI Windows Meeting Clients

CVE-2021-34424

The CVE-2021-34424 entry concerns Zoom products (client and MMR servers) prior to versions around 5.8.x with a memory exposure/info-leak in deserialized data (ssb::variant_t) that could reveal heap/pointer data. The connected sources confirm the vulnerability’s existence, affected components, and...

CVE-2022-28763

CVE-2022-28763 affects Zoom Client for Meetings (Android, iOS, Linux, macOS, Windows) prior to version 5.12.2. The issue is a URL parsing vulnerability where opening a malicious Zoom meeting URL may direct the user to connect to an arbitrary network address, enabling attacks such as session takeo...