cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-24693,https://securityvulnerability.io/vulnerability/CVE-2024-24693,Zoom Rooms Client for Windows Vulnerability Could Lead to Denial of Service via Local Access,"Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.

",Zoom,Zoom Rooms Client For Windows,5.5,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-03-13T19:30:22.311Z,0
CVE-2024-24692,https://securityvulnerability.io/vulnerability/CVE-2024-24692,Zoom Rooms Client Installer Vulnerability Could Lead to Denial of Service,Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.,Zoom,Zoom Rooms Client For Windows,4.7,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-03-13T19:27:30.446Z,0
CVE-2024-24699,https://securityvulnerability.io/vulnerability/CVE-2024-24699,Zoom Clients Vulnerable to Information Disclosure via Network Access,"A business logic error present in various versions of the Zoom client allows an authenticated user to potentially expose sensitive information. This vulnerability is linked to how the application handles network access, posing risks to user privacy and data security. Ensuring the implementation of security updates is crucial for all affected client versions to mitigate the risks associated with this flaw.",Zoom,"Zoom,Vdi Windows Meeting Clients,Rooms,Meeting Sdk",6.5,MEDIUM,0.0005200000014156103,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2024-24697,https://securityvulnerability.io/vulnerability/CVE-2024-24697,Untrusted Search Path Vulnerability in Zoom 32 bit Windows Clients Could Lead to Escalation of Privilege,"A vulnerability exists in the 32-bit Windows client of Zoom, stemming from an untrusted search path issue. This flaw allows an authenticated user to leverage local access for privilege escalation. It highlights the importance of ensuring proper security measures and validation of search paths within applications to mitigate potential exploitation.",Zoom,"Vdi Windows Meeting Clients,Rooms,Zoom,Meeting Sdk",7.8,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2024-24698,https://securityvulnerability.io/vulnerability/CVE-2024-24698,Privileged User May Access Information via Local Access,Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.,Zoom,"Vdi Windows Meeting Clients,Zoom,Meeting Software Development Kit,Rooms",4.4,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2024-24690,https://securityvulnerability.io/vulnerability/CVE-2024-24690,Zoom Clients Vulnerable to Denial of Service Attacks via Network Access,Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.,Zoom,"Zoom,Meeting Software Development Kit,Video Software Development Kit,Rooms,Vdi Windows Meeting Clients",6.5,MEDIUM,0.0005300000193528831,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2023-39203,https://securityvulnerability.io/vulnerability/CVE-2023-39203,Uncontrolled Resource Consumption in Zoom Desktop Client and VDI Client,"A vulnerability in Zoom Team Chat has been identified, which allows for uncontrolled resource consumption in both Zoom Desktop Client for Windows and Zoom VDI Client. An unauthenticated user can exploit this vulnerability via network access, potentially leading to unauthorized disclosure of information. Users should ensure they are updated with the latest security patches provided by Zoom to mitigate this risk.","Zoom Video Communications, Inc.",Zoom Rooms Client For Windows And Zoom Vdi Client,7.5,HIGH,0.000859999970998615,false,false,false,false,,false,false,2023-11-14T23:15:00.000Z,0
CVE-2023-39202,https://securityvulnerability.io/vulnerability/CVE-2023-39202,,Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access.,"Zoom Video Communications, Inc.",Zoom Rooms Client For Windows And Zoom Vdi Client,3.1,LOW,0.0004400000034365803,false,false,false,false,,false,false,2023-11-14T23:15:00.000Z,0
CVE-2023-39211,https://securityvulnerability.io/vulnerability/CVE-2023-39211,Improper Privilege Management in Zoom Desktop Client and Rooms for Windows,"A flaw in the Zoom Desktop Client and Zoom Rooms for Windows allows authenticated users to potentially enable information disclosure through local access. This vulnerability arises from improper privilege management in versions prior to 5.15.5, which may expose sensitive information to users who should not have access.","Zoom Video Communications, Inc.",Zoom Desktop Client For Windows And Zoom Rooms For Windows,8.8,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2023-08-08T22:15:00.000Z,0
CVE-2023-34121,https://securityvulnerability.io/vulnerability/CVE-2023-34121,Input Validation Flaw in Zoom for Windows and Related Products,"An improper input validation vulnerability in the Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients prior to version 5.14.0 has been identified. This security lapse could potentially allow an authenticated user to exploit the flaw and escalate privileges through network access, compromising the application's integrity.","Zoom Video Communications, Inc.","Zoom For Windows,Zoom Rooms Client For Windows,Zoom Vdi For Windows Meeting Clients",8.8,HIGH,0.0011399999493733048,false,false,false,false,,false,false,2023-06-13T18:15:00.000Z,0
CVE-2023-34120,https://securityvulnerability.io/vulnerability/CVE-2023-34120,Improper Privilege Management in Zoom for Windows Clients by Zoom,"A vulnerability in Zoom for Windows, including Zoom Rooms and Zoom VDI prior to version 5.14.0, allows authenticated users to exploit improper privilege management. This could lead to elevated system privileges, enabling them to spawn processes that operate with elevated rights. Such exploitation poses significant security risks, as it may allow unauthorized access to sensitive system functions and data.","Zoom Video Communications, Inc.","Zoom For Windows Client,Zoom Rooms Client For Windows,Zoom Vdi For Windows Meeting Clients",7.8,HIGH,0.0004400000034365803,false,false,false,false,,false,false,2023-06-13T18:15:00.000Z,0
CVE-2022-28766,https://securityvulnerability.io/vulnerability/CVE-2022-28766,DLL injection in Zoom Windows Clients,Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client.,Zoom,"Zoom Client For Meetings For Windows (32-bit),Zoom Vdi Windows Meeting Client For Windows (32-bit),Zoom Rooms For Conference Room For Windows (32-bit)",3.3,LOW,0.0004199999966658652,false,false,false,false,,false,false,2022-11-15T00:00:00.000Z,0
CVE-2022-28764,https://securityvulnerability.io/vulnerability/CVE-2022-28764,Local information exposure in Zoom Clients,"The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Vdi Windows Meeting Clients,Zoom Rooms For Conference Room (for Android, iOS, Linux, Mac OS, And Windows)",3.3,LOW,0.0004199999966658652,false,false,false,false,,false,false,2022-11-14T21:15:00.000Z,0
CVE-2022-28763,https://securityvulnerability.io/vulnerability/CVE-2022-28763,Improper URL parsing in Zoom Clients,"The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including session takeovers.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Vdi Windows Meeting Clients,Zoom Rooms For Conference Room (for Android, iOS, Linux, Mac OS, And Windows)",8.8,HIGH,0.001970000099390745,false,false,false,false,,false,false,2022-10-31T20:15:00.000Z,0
CVE-2022-22788,https://securityvulnerability.io/vulnerability/CVE-2022-22788,DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients,"The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before version 5.10.3 are susceptible to a DLL injection attack. This vulnerability could be used to run arbitrary code on the victims host.",Zoom,"Zoom Client For Meetings,All Zoom Rooms For Conference Room For Windows",7.1,HIGH,0.0006200000061653554,false,false,false,false,,false,false,2022-06-15T21:15:00.000Z,0
CVE-2022-22786,https://securityvulnerability.io/vulnerability/CVE-2022-22786,Update package downgrade in Zoom Client for Meetings for Windows,"The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation version during the update process. This issue could be used in a more sophisticated attack to trick a user into downgrading their Zoom client to a less secure version.",Zoom,"Zoom Client For Meetings For Windows,Zoom Rooms For Conference Room For Windows",7.5,HIGH,0.0020099999383091927,false,false,false,false,,false,false,2022-05-18T16:15:00.000Z,0
CVE-2022-22782,https://securityvulnerability.io/vulnerability/CVE-2022-22782,Local privilege escalation in Windows Zoom Clients,"The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local privilege escalation issue during the installer repair operation. A malicious actor could utilize this to potentially delete system level files or folders, causing integrity or availability issues on the user’s host machine.",Zoom,"Zoom Client For Meetings For Windows,Zoom Rooms For Conference Room For Windows,Zoom Plugins For Microsoft Outlook For Windows,Zoom Vdi Windows Meeting Clients",7.9,HIGH,0.005570000037550926,false,false,false,false,,false,false,2022-04-28T15:15:00.000Z,0
CVE-2021-34424,https://securityvulnerability.io/vulnerability/CVE-2021-34424,Process memory exposure in Zoom Client and other products,"A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom on-premise Meeting Connector before version 4.8.12.20211115, Zoom on-premise Meeting Connector MMR before version 4.8.12.20211115, Zoom on-premise Recording Connector before version 5.1.0.65.20211116, Zoom on-premise Virtual Room Connector before version 4.4.7266.20211117, Zoom on-premise Virtual Room Connector Load Balancer before version 2.5.5692.20211117, Zoom Hybrid Zproxy before version 1.0.1058.20211116, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64 which potentially allowed for the exposure of the state of process memory. This issue could be used to potentially gain insight into arbitrary areas of the product's memory.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Client For Meetings For Blackberry (for Android And iOS),Zoom Client For Meetings For Intune (for Android And iOS),Zoom Client For Meetings For Chrome Os,Zoom Rooms For Conference Room (for Android, Androidbali, Mac OS, And Windows),Controllers For Zoom Rooms (for Android, iOS, And Windows),Zoom Vdi Windows Meeting Client,Zoom Vdi Azure Virtual Desktop Plugins (for Windows X86 Or X64, Igel X64, Ubuntu X64, HP Thinpro Os X64),Zoom Vdi Citrix Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Vdi Vmware Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Meeting Sdk For Android,Zoom Meeting Sdk For iOS,Zoom Meeting Sdk For Mac OS,Zoom Meeting Sdk For Windows,Zoom Video Sdk (for Android, iOS, Mac OS, And Windows),Zoom On-premise Meeting Connector,Zoom On-premise Meeting Connector Mmr,Zoom On-premise Recording Connector,Zoom On-premise Virtual Room Connector,Zoom On-premise Virtual Room Connector Load Balancer,Zoom Hybrid Zproxy,Zoom Hybrid Mmr",5.3,MEDIUM,0.001769999973475933,false,false,false,false,,false,false,2021-11-24T00:00:00.000Z,0
CVE-2021-34423,https://securityvulnerability.io/vulnerability/CVE-2021-34423,Buffer overflow in Zoom client and other products,"A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom On-Premise Meeting Connector Controller before version 4.8.12.20211115, Zoom On-Premise Meeting Connector MMR before version 4.8.12.20211115, Zoom On-Premise Recording Connector before version 5.1.0.65.20211116, Zoom On-Premise Virtual Room Connector before version 4.4.7266.20211117, Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5692.20211117, Zoom Hybrid Zproxy before version 1.0.1058.20211116, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64. This can potentially allow a malicious actor to crash the service or application, or leverage this vulnerability to execute arbitrary code.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Client For Meetings For Blackberry (for Android And iOS),Zoom Client For Meetings For Intune (for Android And iOS),Zoom Client For Meetings For Chrome Os,Zoom Rooms For Conference Room (for Android, Androidbali, Mac OS, And Windows),Controllers For Zoom Rooms (for Android, iOS, And Windows),Zoom Vdi Windows Meeting Client,Zoom Vdi Azure Virtual Desktop Plugins (for Windows X86 Or X64, Igel X64, Ubuntu X64, HP Thinpro Os X64),Zoom Vdi Citrix Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Vdi Vmware Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Meeting Sdk For Android,Zoom Meeting Sdk For iOS,Zoom Meeting Sdk For Mac OS,Zoom Meeting Sdk For Windows,Zoom Video Sdk (for Android, iOS, Mac OS, And Windows),Zoom On-premise Meeting Connector Controller,Zoom On-premise Meeting Connector Mmr,Zoom On-premise Recording Connector,Zoom On-premise Virtual Room Connector,Zoom On-premise Virtual Room Connector Load Balancer,Zoom Hybrid Zproxy,Zoom Hybrid Mmr",7.3,HIGH,0.005229999776929617,false,false,false,false,,false,false,2021-11-24T00:00:00.000Z,0