cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-24690,https://securityvulnerability.io/vulnerability/CVE-2024-24690,Zoom Clients Vulnerable to Denial of Service Attacks via Network Access,Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.,Zoom,"Zoom,Meeting Software Development Kit,Video Software Development Kit,Rooms,Vdi Windows Meeting Clients",6.5,MEDIUM,0.0005300000193528831,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2024-24699,https://securityvulnerability.io/vulnerability/CVE-2024-24699,Zoom Clients Vulnerable to Information Disclosure via Network Access,"A business logic error present in various versions of the Zoom client allows an authenticated user to potentially expose sensitive information. This vulnerability is linked to how the application handles network access, posing risks to user privacy and data security. Ensuring the implementation of security updates is crucial for all affected client versions to mitigate the risks associated with this flaw.",Zoom,"Zoom,Vdi Windows Meeting Clients,Rooms,Meeting Sdk",6.5,MEDIUM,0.0005200000014156103,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2024-24698,https://securityvulnerability.io/vulnerability/CVE-2024-24698,Privileged User May Access Information via Local Access,Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.,Zoom,"Vdi Windows Meeting Clients,Zoom,Meeting Software Development Kit,Rooms",4.4,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2024-24697,https://securityvulnerability.io/vulnerability/CVE-2024-24697,Untrusted Search Path Vulnerability in Zoom 32 bit Windows Clients Could Lead to Escalation of Privilege,"A vulnerability exists in the 32-bit Windows client of Zoom, stemming from an untrusted search path issue. This flaw allows an authenticated user to leverage local access for privilege escalation. It highlights the importance of ensuring proper security measures and validation of search paths within applications to mitigate potential exploitation.",Zoom,"Vdi Windows Meeting Clients,Rooms,Zoom,Meeting Sdk",7.8,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2023-39202,https://securityvulnerability.io/vulnerability/CVE-2023-39202,Denial of Service Vulnerability in Zoom Rooms Client and Zoom VDI Client,"The Zoom Rooms Client for Windows and Zoom VDI Client contain a vulnerability that can be exploited through an untrusted search path. A privileged user with local access may utilize this vulnerability to trigger a denial of service, leading to interruptions in service. This poses a significant risk to operational continuity when using these applications in various environments.","Zoom Video Communications, Inc.",Zoom Rooms Client For Windows And Zoom Vdi Client,3.1,LOW,0.0004400000034365803,false,false,false,false,,false,false,2023-11-14T23:15:00.000Z,0
CVE-2023-39203,https://securityvulnerability.io/vulnerability/CVE-2023-39203,Uncontrolled Resource Consumption in Zoom Desktop Client and VDI Client,"A vulnerability in Zoom Team Chat has been identified, which allows for uncontrolled resource consumption in both Zoom Desktop Client for Windows and Zoom VDI Client. An unauthenticated user can exploit this vulnerability via network access, potentially leading to unauthorized disclosure of information. Users should ensure they are updated with the latest security patches provided by Zoom to mitigate this risk.","Zoom Video Communications, Inc.",Zoom Rooms Client For Windows And Zoom Vdi Client,7.5,HIGH,0.000859999970998615,false,false,false,false,,false,false,2023-11-14T23:15:00.000Z,0
CVE-2023-34121,https://securityvulnerability.io/vulnerability/CVE-2023-34121,Input Validation Flaw in Zoom for Windows and Related Products,"An improper input validation vulnerability in the Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients prior to version 5.14.0 has been identified. This security lapse could potentially allow an authenticated user to exploit the flaw and escalate privileges through network access, compromising the application's integrity.","Zoom Video Communications, Inc.","Zoom For Windows,Zoom Rooms Client For Windows,Zoom Vdi For Windows Meeting Clients",8.8,HIGH,0.0011399999493733048,false,false,false,false,,false,false,2023-06-13T18:15:00.000Z,0
CVE-2023-34120,https://securityvulnerability.io/vulnerability/CVE-2023-34120,Improper Privilege Management in Zoom for Windows Clients by Zoom,"A vulnerability in Zoom for Windows, including Zoom Rooms and Zoom VDI prior to version 5.14.0, allows authenticated users to exploit improper privilege management. This could lead to elevated system privileges, enabling them to spawn processes that operate with elevated rights. Such exploitation poses significant security risks, as it may allow unauthorized access to sensitive system functions and data.","Zoom Video Communications, Inc.","Zoom For Windows Client,Zoom Rooms Client For Windows,Zoom Vdi For Windows Meeting Clients",7.8,HIGH,0.0004400000034365803,false,false,false,false,,false,false,2023-06-13T18:15:00.000Z,0
CVE-2022-28766,https://securityvulnerability.io/vulnerability/CVE-2022-28766,DLL injection in Zoom Windows Clients,Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client.,Zoom,"Zoom Client For Meetings For Windows (32-bit),Zoom Vdi Windows Meeting Client For Windows (32-bit),Zoom Rooms For Conference Room For Windows (32-bit)",3.3,LOW,0.0004199999966658652,false,false,false,false,,false,false,2022-11-15T00:00:00.000Z,0
CVE-2022-28764,https://securityvulnerability.io/vulnerability/CVE-2022-28764,Local information exposure in Zoom Clients,"The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Vdi Windows Meeting Clients,Zoom Rooms For Conference Room (for Android, iOS, Linux, Mac OS, And Windows)",3.3,LOW,0.0004199999966658652,false,false,false,false,,false,false,2022-11-14T21:15:00.000Z,0
CVE-2022-28763,https://securityvulnerability.io/vulnerability/CVE-2022-28763,Improper URL parsing in Zoom Clients,"The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including session takeovers.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Vdi Windows Meeting Clients,Zoom Rooms For Conference Room (for Android, iOS, Linux, Mac OS, And Windows)",8.8,HIGH,0.001970000099390745,false,false,false,false,,false,false,2022-10-31T20:15:00.000Z,0
CVE-2022-22782,https://securityvulnerability.io/vulnerability/CVE-2022-22782,Local privilege escalation in Windows Zoom Clients,"The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local privilege escalation issue during the installer repair operation. A malicious actor could utilize this to potentially delete system level files or folders, causing integrity or availability issues on the user’s host machine.",Zoom,"Zoom Client For Meetings For Windows,Zoom Rooms For Conference Room For Windows,Zoom Plugins For Microsoft Outlook For Windows,Zoom Vdi Windows Meeting Clients",7.9,HIGH,0.005570000037550926,false,false,false,false,,false,false,2022-04-28T15:15:00.000Z,0
CVE-2021-34423,https://securityvulnerability.io/vulnerability/CVE-2021-34423,Buffer overflow in Zoom client and other products,"A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom On-Premise Meeting Connector Controller before version 4.8.12.20211115, Zoom On-Premise Meeting Connector MMR before version 4.8.12.20211115, Zoom On-Premise Recording Connector before version 5.1.0.65.20211116, Zoom On-Premise Virtual Room Connector before version 4.4.7266.20211117, Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5692.20211117, Zoom Hybrid Zproxy before version 1.0.1058.20211116, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64. This can potentially allow a malicious actor to crash the service or application, or leverage this vulnerability to execute arbitrary code.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Client For Meetings For Blackberry (for Android And iOS),Zoom Client For Meetings For Intune (for Android And iOS),Zoom Client For Meetings For Chrome Os,Zoom Rooms For Conference Room (for Android, Androidbali, Mac OS, And Windows),Controllers For Zoom Rooms (for Android, iOS, And Windows),Zoom Vdi Windows Meeting Client,Zoom Vdi Azure Virtual Desktop Plugins (for Windows X86 Or X64, Igel X64, Ubuntu X64, HP Thinpro Os X64),Zoom Vdi Citrix Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Vdi Vmware Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Meeting Sdk For Android,Zoom Meeting Sdk For iOS,Zoom Meeting Sdk For Mac OS,Zoom Meeting Sdk For Windows,Zoom Video Sdk (for Android, iOS, Mac OS, And Windows),Zoom On-premise Meeting Connector Controller,Zoom On-premise Meeting Connector Mmr,Zoom On-premise Recording Connector,Zoom On-premise Virtual Room Connector,Zoom On-premise Virtual Room Connector Load Balancer,Zoom Hybrid Zproxy,Zoom Hybrid Mmr",7.3,HIGH,0.005229999776929617,false,false,false,false,,false,false,2021-11-24T00:00:00.000Z,0
CVE-2021-34424,https://securityvulnerability.io/vulnerability/CVE-2021-34424,Process memory exposure in Zoom Client and other products,"A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom on-premise Meeting Connector before version 4.8.12.20211115, Zoom on-premise Meeting Connector MMR before version 4.8.12.20211115, Zoom on-premise Recording Connector before version 5.1.0.65.20211116, Zoom on-premise Virtual Room Connector before version 4.4.7266.20211117, Zoom on-premise Virtual Room Connector Load Balancer before version 2.5.5692.20211117, Zoom Hybrid Zproxy before version 1.0.1058.20211116, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64 which potentially allowed for the exposure of the state of process memory. This issue could be used to potentially gain insight into arbitrary areas of the product's memory.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Client For Meetings For Blackberry (for Android And iOS),Zoom Client For Meetings For Intune (for Android And iOS),Zoom Client For Meetings For Chrome Os,Zoom Rooms For Conference Room (for Android, Androidbali, Mac OS, And Windows),Controllers For Zoom Rooms (for Android, iOS, And Windows),Zoom Vdi Windows Meeting Client,Zoom Vdi Azure Virtual Desktop Plugins (for Windows X86 Or X64, Igel X64, Ubuntu X64, HP Thinpro Os X64),Zoom Vdi Citrix Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Vdi Vmware Plugins (for Windows X86 Or X64, Mac Universal Installer & Uninstaller, Igel X64, Elux Rp6 X64, HP Thinpro Os X64, Ubuntu X64, Centos X 64, Dell Thinos),Zoom Meeting Sdk For Android,Zoom Meeting Sdk For iOS,Zoom Meeting Sdk For Mac OS,Zoom Meeting Sdk For Windows,Zoom Video Sdk (for Android, iOS, Mac OS, And Windows),Zoom On-premise Meeting Connector,Zoom On-premise Meeting Connector Mmr,Zoom On-premise Recording Connector,Zoom On-premise Virtual Room Connector,Zoom On-premise Virtual Room Connector Load Balancer,Zoom Hybrid Zproxy,Zoom Hybrid Mmr",5.3,MEDIUM,0.001769999973475933,false,false,false,false,,false,false,2021-11-24T00:00:00.000Z,0