cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2024-24691,https://securityvulnerability.io/vulnerability/CVE-2024-24691,Unauthenticated Escalation of Privilege Vulnerability in Zoom Desktop Client for Windows,"A security flaw in various Zoom products, specifically the Zoom Desktop Client, Zoom VDI Client, and Zoom Meeting SDK for Windows, exists due to improper input validation. This vulnerability could enable an unauthenticated user to perform an elevation of privilege attack through network access, potentially compromising sensitive information and user permissions. It is crucial for users and administrators to remain vigilant and apply any security updates provided by Zoom to mitigate this vulnerability.","Zoom Video Communications, Inc.","Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows",9.8,CRITICAL,0.0010499999625608325,false,,true,false,false,,,true,true,2024-02-16T17:52:02.617Z,2024-02-14T00:15:00.000Z,9953 CVE-2023-49647,https://securityvulnerability.io/vulnerability/CVE-2023-49647,Zoom Desktop Client for Windows Vulnerability: Escalation of Privilege via Local Access,"An issue has been identified in the Zoom Desktop Client, VDI Client, and SDKs for Windows that presents an improper access control vulnerability. This flaw could enable an authenticated user to escalate privileges through local access, which may compromise the security of the affected systems. Users and organizations relying on these Zoom products should consider upgrading to versions 5.16.10 or later to mitigate the associated risks.","Zoom Video Communications, Inc.","Zoom Desktop Client For Windows, Zoom Vdi Client For Windows, And Zoom Sdks For Windows Before Version 5.16.10",7.8,HIGH,0.0004299999854993075,false,,false,false,false,,,false,false,,2024-01-12T21:44:00.743Z,0 CVE-2023-43586,https://securityvulnerability.io/vulnerability/CVE-2023-43586,Path Traversal Vulnerability in Zoom Desktop Client and SDKs on Windows,"A path traversal vulnerability in the Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows allows authenticated users to exploit network access for privilege escalation. Attackers may leverage this weakness to access restricted files and execute unauthorized commands, posing a significant security risk.","Zoom Video Communications, Inc.","Zoom Desktop Client for Windows, Zoom VDI Client for Windows and Zoom SDKs for Windows",7.3,HIGH,0.0007999999797903001,false,,false,false,false,,,false,false,,2023-12-13T23:15:00.000Z,0 CVE-2023-39213,https://securityvulnerability.io/vulnerability/CVE-2023-39213,Escalation of Privilege in Zoom Desktop Client and VDI Client,"A vulnerability affecting the Zoom Desktop Client and Zoom VDI Client prior to version 5.15.2 allows an unauthenticated user to exploit improper neutralization of special elements. This could lead to privilege escalation through network access, potentially compromising the integrity of the system.","Zoom Video Communications, Inc.",Zoom Desktop Client For Windows And Zoom Vdi Client,9.6,CRITICAL,0.0020000000949949026,false,,false,false,false,,,false,false,,2023-08-08T22:15:00.000Z,0 CVE-2021-34423,https://securityvulnerability.io/vulnerability/CVE-2021-34423,Buffer overflow in Zoom client and other products,"A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom On-Premise Meeting Connector Controller before version 4.8.12.20211115, Zoom On-Premise Meeting Connector MMR before version 4.8.12.20211115, Zoom On-Premise Recording Connector before version 5.1.0.65.20211116, Zoom On-Premise Virtual Room Connector before version 4.4.7266.20211117, Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5692.20211117, Zoom Hybrid Zproxy before version 1.0.1058.20211116, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64. This can potentially allow a malicious actor to crash the service or application, or leverage this vulnerability to execute arbitrary code.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Client For Meetings For Blackberry (for Android And iOS),Zoom Client For Meetings For Intune (for Android And iOS),Zoom Client For Meetings For Chrome Os,Zoom Rooms For Conference Room (for Android, Androidbali, Mac OS, And Windows),Controllers For Zoom Rooms (for Android, iOS, And Windows),Zoom Vdi Windows Meeting Client,Zoom Vdi Azure Virtual Desktop Plugins (for Windows X86 Or X64, Igel X64, Ubuntu X64, HP Thinpro Os X64),Zoom Vdi Citrix Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Vdi Vmware Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Meeting Sdk For Android,Zoom Meeting Sdk For iOS,Zoom Meeting Sdk For Mac OS,Zoom Meeting Sdk For Windows,Zoom Video Sdk (for Android, iOS, Mac OS, And Windows),Zoom On-premise Meeting Connector Controller,Zoom On-premise Meeting Connector Mmr,Zoom On-premise Recording Connector,Zoom On-premise Virtual Room Connector,Zoom On-premise Virtual Room Connector Load Balancer,Zoom Hybrid Zproxy,Zoom Hybrid Mmr",7.3,HIGH,0.005229999776929617,false,,false,false,false,,,false,false,,2021-11-24T00:00:00.000Z,0 CVE-2021-34424,https://securityvulnerability.io/vulnerability/CVE-2021-34424,Process memory exposure in Zoom Client and other products,"A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom on-premise Meeting Connector before version 4.8.12.20211115, Zoom on-premise Meeting Connector MMR before version 4.8.12.20211115, Zoom on-premise Recording Connector before version 5.1.0.65.20211116, Zoom on-premise Virtual Room Connector before version 4.4.7266.20211117, Zoom on-premise Virtual Room Connector Load Balancer before version 2.5.5692.20211117, Zoom Hybrid Zproxy before version 1.0.1058.20211116, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64 which potentially allowed for the exposure of the state of process memory. This issue could be used to potentially gain insight into arbitrary areas of the product's memory.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Client For Meetings For Blackberry (for Android And iOS),Zoom Client For Meetings For Intune (for Android And iOS),Zoom Client For Meetings For Chrome Os,Zoom Rooms For Conference Room (for Android, Androidbali, Mac OS, And Windows),Controllers For Zoom Rooms (for Android, iOS, And Windows),Zoom Vdi Windows Meeting Client,Zoom Vdi Azure Virtual Desktop Plugins (for Windows X86 Or X64, Igel X64, Ubuntu X64, HP Thinpro Os X64),Zoom Vdi Citrix Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Vdi Vmware Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Meeting Sdk For Android,Zoom Meeting Sdk For iOS,Zoom Meeting Sdk For Mac OS,Zoom Meeting Sdk For Windows,Zoom Video Sdk (for Android, iOS, Mac OS, And Windows),Zoom On-premise Meeting Connector,Zoom On-premise Meeting Connector Mmr,Zoom On-premise Recording Connector,Zoom On-premise Virtual Room Connector,Zoom On-premise Virtual Room Connector Load Balancer,Zoom Hybrid Zproxy,Zoom Hybrid Mmr",5.3,MEDIUM,0.001769999973475933,false,,false,false,false,,,false,false,,2021-11-24T00:00:00.000Z,0