CVE-2024-45421

CVE-2024-45421 describes a buffer overflow in some Zoom Apps that could allow an authenticated user to escalate privileges over the network. The PT-2024-31624 entry specifies Zoom Product Suite versions prior to 6.2.0 as affected and recommends upgrading to 6.2.0 or later to address the issue. Ot...

CVE-2023-36539

CVE-2023-36539 — Zoom Client for Meetings information disclosure . The connected OpenVAS/Nessus entries confirm a vulnerability in Zoom Client for Meetings affecting Windows, macOS, and Linux, where unintended exposure of data “intended to be encrypted” could disclose sensitive information. Affec...

CVE-2023-43586

The CVE-2023-43586 issue is a path traversal vulnerability in Zoom components on Windows: Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows. The NVD entry describes authenticated privilege escalation via network access, supported by accompanying metrics showi...

CVE-2024-45417

Zoom Apps for macOS is affected by CVE-2024-45417 due to uncontrolled resource consumption in the installer prior to version 6.1.5. A privileged local user could leverage this to disclose information. The available details indicate the impact is information disclosure with local access, and remed...

CVE-2024-24690

The CVE-2024-24690 entry concerns Zoom clients with improper input validation that can allow an authenticated user to trigger a denial of service over the network. Connected documents corroborate affected Zoom products (e.g., Zoom Client for Meetings and Zoom VDI Client) and show vulnerable versi...

CVE-2025-0144

CVE-2025-0144 describes an out-of-bounds write in Zoom Workplace Apps that can lead to loss of integrity over a network when processing a specific request. Multiple sources confirm the issue affects Zoom Workplace Desktop App prior to version 6.2.5 (per Nessus ZSB-25003) and indicate the vulnerab...

CVE-2025-0145

CVE-2025-0145 affects Zoom Workplace Desktop App for Windows. Vulnerability: untrusted search path in the installer could allow an authorized local user to escalate privileges. Public details consistently reference installations prior to version 6.2.5 as affected (e.g., Nessus ZSB-25004 notes). R...

CVE-2023-49647

CVE-2023-49647 affects Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows prior to version 5.16.10. The root cause is improper access control that may allow an authenticated user with local access to escalate privileges, with high impact to confidentiality, in...

CVE-2024-45418

CVE-2024-45418 affects Zoom Apps for macOS prior to 6.1.5. The root cause is symlink following in the installer which could enable an authenticated user to escalate privileges over the network. Impact is elevated privileges on the host; no exploitation details are provided beyond the stated risk....

CVE-2023-49646

CVE-2023-49646 affects Zoom client software incl. Zoom Client for Meetings and Zoom VDI Meeting Client when running versions prior to 5.16.5. The issue is described as improper authentication that may allow an authenticated user to cause a denial-of-service via network access. The vulnerability h...

CVE-2023-43583

CVE-2023-43583 affects Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android/iOS prior to 5.16.0. The issue is described as cryptographic problems that may let a privileged user disclose information via network access. Affected components include the Zoom Mobile Apps acr...

CVE-2025-0147

Zoom Workplace App for Linux prior to version 6.2.10 contains a type confusion vulnerability that may allow an authorized user to escalate privileges via network access. The issue affects the Linux desktop client and is tied to handling of data types, enabling escalation to root-level privileges ...

CVE-2023-39206

CVE-2023-39206 refers to a buffer overflow in Zoom Client variants that allows an unauthenticated user to cause a denial of service over the network. Connected sources indicate affected builds include Zoom Client before 5.16.0 (Mac, Windows, Linux) with multiple advisories (ZSB family) and a CVSS...

CVE-2025-0143

CVE-2025-0143 describes an out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5, which may allow an unauthorized user to cause a denial of service via network access. Affected software is the Zoom Workplace App for Linux; root cause is the out-of-bounds write condition. Th...

CVE-2025-0146

CVE-2025-0146 affects Zoom Workplace App for macOS prior to 6.2.10. The issue arises from symlink following in the installer, allowing an authenticated user with local access to cause a denial of service. Public sources in the connected documents corroborate the DoS impact via local access due to...

CVE-2024-45419

CVE-2024-45419 concerns Zoom Apps and involves improper input validation that can allow an unauthenticated user to disclose information over the network. Affected software is Zoom Apps (per the CVE entry and multiple sources), with the vulnerability described as enabling information disclosure vi...

CVE-2023-39205

CVE-2023-39205 describes an issue in Zoom Team Chat affecting Zoom Client platforms where an improper conditions check can allow an authenticated user to cause a denial-of-service over the network. Reports in NVD summarize impact as Availability: High (DoS) with Confidentiality/Integrity not impa...

CVE-2023-39204

CVE-2023-39204 targets Zoom client software with a buffer overflow vulnerability that can allow an unauthenticated attacker to cause a denial of service over the network. Public details confirm affected products include Zoom Client for Meetings (Windows/macOS) older than 5.15.10 and Zoom VDI/Meet...

CVE-2024-45422

CVE-2024-45422 affects Zoom Apps (Zoom, prior to 6.2.0) due to improper input validation, enabling an unauthenticated user to trigger a denial of service over the network. The issue is documented in multiple sources (including PT-2024-31625) with explicit affected version range and network-based ...

CVE-2024-45420

CVE-2024-45420 relates to Zoom Apps. The connected PT-2024-31623 note confirms the issue: an authenticated user can trigger a denial of service via network access due to uncontrolled resource consumption in Zoom Apps before version 6.2.0. Affected software: Zoom Apps prior to 6.2.0. Impact: DoS c...

CVE-2023-43585

CVE-2023-43585 corresponds to Zoom components on iOS: Zoom Mobile App for iOS and Zoom SDKs for iOS prior to version 5.16.5. The root cause is improper access control that may allow an authenticated user to disclose information via network access. Affected products include Zoom Mobile App for iOS...

CVE-2023-39217

The CVE-2023-39217 issue affects the Zoom SDK prior to version 5.14.10, caused by improper input validation in the SDK, enabling an unauthenticated attacker to trigger a denial of service over the network. Existence and details are supported by multiple connected documents, including PT-2023-2683...

CVE-2023-36533

CVE-2023-36533 affects Zoom Client SDKs prior to 5.14.7, where an unauthenticated actor could trigger uncontrolled resource consumption over the network to cause a denial of service. Public details across connected sources confirm the vulnerability in Zoom SDK components and identify the affected...