Zoom: Security Vulnerabilities
Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access.
CVSS Score
7.1
EPSS Score
0.001
Published
2024-07-15
Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVSS Score
6.7
EPSS Score
0.001
Published
2024-05-15
Buffer overflow in some Zoom Workplace Apps and SDK’s may allow an authenticated user to conduct a denial of service via network access.
CVSS Score
6.5
EPSS Score
0.008
Published
2024-05-15
Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access.
CVSS Score
4.1
EPSS Score
0.001
Published
2024-04-09
Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access.
CVSS Score
5.5
EPSS Score
0.0
Published
2024-04-09
Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access.
CVSS Score
5.9
EPSS Score
0.0
Published
2024-04-09
Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.
CVSS Score
5.3
EPSS Score
0.001
Published
2024-03-13
Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.
CVSS Score
7.2
EPSS Score
0.001
Published
2024-03-13
Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.
CVSS Score
6.5
EPSS Score
0.002
Published
2024-02-14
Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.
CVSS Score
5.4
EPSS Score
0.001
Published
2024-02-14