Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zoom zoom vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-39208
Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of service via network access.
Zoom Zoom
NA
CVE-2023-39209
Improper input validation in Zoom Desktop Client for Windows prior to 5.15.5 may allow an authenticated user to enable an information disclosure via network access.
Zoom Zoom
NA
CVE-2023-36534
Path traversal in Zoom Desktop Client for Windows prior to 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
Zoom Zoom
NA
CVE-2023-36540
Untrusted search path in the installer for Zoom Desktop Client for Windows prior to 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
Zoom Zoom
NA
CVE-2023-36541
Insufficient verification of data authenticity in Zoom Desktop Client for Windows prior to 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access.
Zoom Zoom
7.5
CVSSv2
CVE-2018-15715
Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to unauthorized message processing. A remote unauthenticated attacker can spoof UDP messages from a meeting attendee or Zoom serve...
Zoom Zoom
NA
CVE-2022-28764
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-devi...
Zoom Vdi Windows Meeting Clients
Zoom Rooms
Zoom Meetings
7.5
CVSSv2
CVE-2020-6109
An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat message can cause an arbitrary file write, which could potentially be abused to achieve arbitrary code execution. An attacker...
Zoom Zoom 4.6.10
1 Article
6.8
CVSSv2
CVE-2020-6110
An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially crafted chat message can cause an arbitrary binary planting which could be abused to achieve arbitrary code execution. A...
Zoom Zoom 4.6.10
1 Article
5
CVSSv2
CVE-2022-22783
A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be observed by a passive attacker.
Zoom Zoom On-premise Meeting Connector Controller 4.8.102.20220310
Zoom Zoom On-premise Meeting Connector Mmr 4.8.102.20220310
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
CVE-2024-20360
CVE-2021-47559
XXE
CVE-2024-5229
CVE-2021-47543
CVE-2021-47571
SSTI
CVE-2024-4978
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »