cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-24693,https://securityvulnerability.io/vulnerability/CVE-2024-24693,Zoom Rooms Client for Windows Vulnerability Could Lead to Denial of Service via Local Access,"Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.

",Zoom,Zoom Rooms Client For Windows,5.5,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-03-13T19:30:22.311Z,0
CVE-2024-24692,https://securityvulnerability.io/vulnerability/CVE-2024-24692,Zoom Rooms Client Installer Vulnerability Could Lead to Denial of Service,Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.,Zoom,Zoom Rooms Client For Windows,4.7,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-03-13T19:27:30.446Z,0
CVE-2024-24697,https://securityvulnerability.io/vulnerability/CVE-2024-24697,Untrusted Search Path Vulnerability in Zoom 32 bit Windows Clients Could Lead to Escalation of Privilege,"A vulnerability exists in the 32-bit Windows client of Zoom, stemming from an untrusted search path issue. This flaw allows an authenticated user to leverage local access for privilege escalation. It highlights the importance of ensuring proper security measures and validation of search paths within applications to mitigate potential exploitation.",Zoom,"Vdi Windows Meeting Clients,Rooms,Zoom,Meeting Sdk",7.8,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2024-24690,https://securityvulnerability.io/vulnerability/CVE-2024-24690,Zoom Clients Vulnerable to Denial of Service Attacks via Network Access,Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.,Zoom,"Zoom,Meeting Software Development Kit,Video Software Development Kit,Rooms,Vdi Windows Meeting Clients",6.5,MEDIUM,0.0005300000193528831,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2024-24699,https://securityvulnerability.io/vulnerability/CVE-2024-24699,Zoom Clients Vulnerable to Information Disclosure via Network Access,"A business logic error present in various versions of the Zoom client allows an authenticated user to potentially expose sensitive information. This vulnerability is linked to how the application handles network access, posing risks to user privacy and data security. Ensuring the implementation of security updates is crucial for all affected client versions to mitigate the risks associated with this flaw.",Zoom,"Zoom,Vdi Windows Meeting Clients,Rooms,Meeting Sdk",6.5,MEDIUM,0.0005200000014156103,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2024-24698,https://securityvulnerability.io/vulnerability/CVE-2024-24698,Privileged User May Access Information via Local Access,Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.,Zoom,"Vdi Windows Meeting Clients,Zoom,Meeting Software Development Kit,Rooms",4.4,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-02-14T00:15:00.000Z,0
CVE-2023-39202,https://securityvulnerability.io/vulnerability/CVE-2023-39202,Denial of Service Vulnerability in Zoom Rooms Client and Zoom VDI Client,"The Zoom Rooms Client for Windows and Zoom VDI Client contain a vulnerability that can be exploited through an untrusted search path. A privileged user with local access may utilize this vulnerability to trigger a denial of service, leading to interruptions in service. This poses a significant risk to operational continuity when using these applications in various environments.","Zoom Video Communications, Inc.",Zoom Rooms Client For Windows And Zoom Vdi Client,3.1,LOW,0.0004400000034365803,false,false,false,false,,false,false,2023-11-14T23:15:00.000Z,0
CVE-2023-39203,https://securityvulnerability.io/vulnerability/CVE-2023-39203,Uncontrolled Resource Consumption in Zoom Desktop Client and VDI Client,"A vulnerability in Zoom Team Chat has been identified, which allows for uncontrolled resource consumption in both Zoom Desktop Client for Windows and Zoom VDI Client. An unauthenticated user can exploit this vulnerability via network access, potentially leading to unauthorized disclosure of information. Users should ensure they are updated with the latest security patches provided by Zoom to mitigate this risk.","Zoom Video Communications, Inc.",Zoom Rooms Client For Windows And Zoom Vdi Client,7.5,HIGH,0.000859999970998615,false,false,false,false,,false,false,2023-11-14T23:15:00.000Z,0
CVE-2023-39211,https://securityvulnerability.io/vulnerability/CVE-2023-39211,Improper Privilege Management in Zoom Desktop Client and Rooms for Windows,"A flaw in the Zoom Desktop Client and Zoom Rooms for Windows allows authenticated users to potentially enable information disclosure through local access. This vulnerability arises from improper privilege management in versions prior to 5.15.5, which may expose sensitive information to users who should not have access.","Zoom Video Communications, Inc.",Zoom Desktop Client For Windows And Zoom Rooms For Windows,8.8,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2023-08-08T22:15:00.000Z,0
CVE-2023-39212,https://securityvulnerability.io/vulnerability/CVE-2023-39212,Untrusted Search Path Vulnerability in Zoom Rooms for Windows,"The Zoom Rooms for Windows software contains a vulnerability related to an untrusted search path that affects versions prior to 5.15.5. This issue may allow an authenticated user to initiate a denial of service attack through local access, potentially disrupting the functionality of the application.","Zoom Video Communications, Inc.",Zoom Rooms For Windows,7.9,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2023-08-08T22:15:00.000Z,0
CVE-2023-36537,https://securityvulnerability.io/vulnerability/CVE-2023-36537,Improper Privilege Management in Zoom Rooms for Windows by Zoom,"Zoom Rooms for Windows experienced an issue where improper privilege management could allow an authenticated user to escalate their privileges through local access. This vulnerability existed in versions prior to 5.14.5, posing potential risks to system integrity and user data. It is crucial for users to update to the latest version to mitigate these vulnerabilities and enhance security.","Zoom Video Communications, Inc.",Zoom Rooms For Windows,7.8,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2023-07-11T18:15:00.000Z,0
CVE-2023-34119,https://securityvulnerability.io/vulnerability/CVE-2023-34119,Insecure File Handling in Zoom Rooms for Windows by Zoom,"The installer for Zoom Rooms for Windows prior to version 5.15.0 contains an insecure temporary file issue that allows authenticated users to exploit local access. This vulnerability enables an escalation of privileges, potentially compromising system security. Maintaining updated software is essential to mitigate risks associated with this type of vulnerability.","Zoom Video Communications, Inc.",Zoom Rooms For Windows,8.2,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2023-07-11T18:15:00.000Z,0
CVE-2023-34118,https://securityvulnerability.io/vulnerability/CVE-2023-34118,Privilege Escalation in Zoom Rooms for Windows by Zoom,"The vulnerability in Zoom Rooms for Windows arises from improper privilege management. Authenticated users with local access can exploit this flaw to escalate privileges, potentially compromising the security of the system. It is crucial for users to update to version 5.14.5 or later to mitigate this issue. For more information, please refer to the security bulletin from Zoom.","Zoom Video Communications, Inc.",Zoom Rooms For Windows,7.3,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2023-07-11T18:15:00.000Z,0
CVE-2023-36536,https://securityvulnerability.io/vulnerability/CVE-2023-36536,Privilege Escalation in Zoom Rooms Installer for Windows,"An untrusted search path vulnerability exists in the installer of Zoom Rooms for Windows prior to version 5.15.0. This vulnerability allows authenticated users to exploit local access to escalate their privileges, potentially compromising the security of the system. Users should ensure that they are using the latest version of Zoom Rooms to mitigate this risk.","Zoom Video Communications, Inc.",Zoom Rooms For Windows,8.2,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2023-07-11T18:15:00.000Z,0
CVE-2023-36538,https://securityvulnerability.io/vulnerability/CVE-2023-36538,Improper Access Control Vulnerability in Zoom Rooms for Windows,"An improper access control vulnerability exists in Zoom Rooms for Windows versions prior to 5.15.0. This issue permits authenticated users to escalate their privileges through local access, potentially allowing unauthorized actions within the application. It is crucial for users to update to the latest version to mitigate this security risk and protect sensitive information.","Zoom Video Communications, Inc.",Zoom Rooms For Windows,7.8,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2023-07-11T18:15:00.000Z,0
CVE-2023-34120,https://securityvulnerability.io/vulnerability/CVE-2023-34120,Improper Privilege Management in Zoom for Windows Clients by Zoom,"A vulnerability in Zoom for Windows, including Zoom Rooms and Zoom VDI prior to version 5.14.0, allows authenticated users to exploit improper privilege management. This could lead to elevated system privileges, enabling them to spawn processes that operate with elevated rights. Such exploitation poses significant security risks, as it may allow unauthorized access to sensitive system functions and data.","Zoom Video Communications, Inc.","Zoom For Windows Client,Zoom Rooms Client For Windows,Zoom Vdi For Windows Meeting Clients",7.8,HIGH,0.0004400000034365803,false,false,false,false,,false,false,2023-06-13T18:15:00.000Z,0
CVE-2023-34121,https://securityvulnerability.io/vulnerability/CVE-2023-34121,Input Validation Flaw in Zoom for Windows and Related Products,"An improper input validation vulnerability in the Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients prior to version 5.14.0 has been identified. This security lapse could potentially allow an authenticated user to exploit the flaw and escalate privileges through network access, compromising the application's integrity.","Zoom Video Communications, Inc.","Zoom For Windows,Zoom Rooms Client For Windows,Zoom Vdi For Windows Meeting Clients",8.8,HIGH,0.0011399999493733048,false,false,false,false,,false,false,2023-06-13T18:15:00.000Z,0
CVE-2023-28597,https://securityvulnerability.io/vulnerability/CVE-2023-28597,Improper trust boundary implementation for SMB in Zoom Clients,"Zoom clients earlier than version 5.13.5 are impacted by a vulnerability related to improper trust boundary implementation. When users save local recordings to an SMB location and later access them via a link from the Zoom web portal, an attacker on an adjacent network may exploit this weakness. By establishing a malicious SMB server, the attacker can intercept client requests and inadvertently execute harmful executables on the client's device. This scenario poses significant risks, including unauthorized access to user data and the potential for remote code execution, highlighting the importance of maintaining up-to-date software for security.",Zoom,"Zoom (for Android, iOS, Linux, macOS, and Windows),Zoom Rooms (for Android, iOS, Linux, macOS, and Windows),Zoom VDI for Windows",7.5,HIGH,0.0010100000072270632,false,false,false,false,,false,false,2023-03-27T00:00:00.000Z,0
CVE-2023-22880,https://securityvulnerability.io/vulnerability/CVE-2023-22880,Information Disclosure in Zoom for Windows Clients,"Zoom for Windows clients prior to version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5, and Zoom VDI for Windows clients before version 5.13.1 are susceptible to an information disclosure flaw. This issue arises from a recent update to the Microsoft Edge WebView2 runtime utilized by Zoom, where sensitive text data was inadvertently sent to Microsoft's online Spellcheck service instead of being processed locally. To mitigate this vulnerability, users are advised to update their Zoom application to the latest version, which disables the problematic feature, and also ensure that their Microsoft Edge WebView2 runtime is updated to at least version 109.0.1481.0.",Zoom,"Zoom for Windows,Zoom Rooms for Windows,Zoom VDI for Windows",7.5,HIGH,0.001500000013038516,false,false,false,false,,false,false,2023-03-16T00:00:00.000Z,0
CVE-2022-36930,https://securityvulnerability.io/vulnerability/CVE-2022-36930,Local Privilege Escalation in Zoom Rooms for Windows Installers,"A local privilege escalation vulnerability exists in Zoom Rooms for Windows installers prior to version 5.13.0. This flaw can be exploited by low-privileged users to escalate their privileges, potentially allowing them to gain SYSTEM-level access. This vulnerability can be a critical component of an attack chain, emphasizing the need for users to update their Zoom Rooms installations promptly to mitigate this risk.",Zoom,Zoom Rooms For Windows,8.8,HIGH,0.0004199999966658652,false,false,false,false,,false,false,2023-01-09T00:00:00.000Z,0
CVE-2022-36929,https://securityvulnerability.io/vulnerability/CVE-2022-36929,Local Privilege Escalation in Zoom Rooms for Windows Clients,"The Zoom Rooms Installer for Windows versions prior to 5.12.6 is susceptible to a local privilege escalation vulnerability. This issue allows a low-privileged local user to exploit the installation process to gain elevated privileges, potentially allowing them to execute commands or manipulate the system as a SYSTEM user. Users are encouraged to update to the latest version to mitigate this risk.",Zoom,Zoom Rooms For Windows,7.8,HIGH,0.0004199999966658652,false,false,false,false,,false,false,2023-01-09T00:00:00.000Z,0
CVE-2022-36924,https://securityvulnerability.io/vulnerability/CVE-2022-36924,Local Privilege Escalation in Zoom Rooms Installer for Windows,The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user.,Zoom,Zoom Rooms Installer For Windows,8.8,HIGH,0.0004199999966658652,false,false,false,false,,false,false,2022-11-17T23:15:00.000Z,0
CVE-2022-28766,https://securityvulnerability.io/vulnerability/CVE-2022-28766,DLL injection in Zoom Windows Clients,Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client.,Zoom,"Zoom Client For Meetings For Windows (32-bit),Zoom Vdi Windows Meeting Client For Windows (32-bit),Zoom Rooms For Conference Room For Windows (32-bit)",3.3,LOW,0.0004199999966658652,false,false,false,false,,false,false,2022-11-15T00:00:00.000Z,0
CVE-2022-28764,https://securityvulnerability.io/vulnerability/CVE-2022-28764,Local information exposure in Zoom Clients,"The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Vdi Windows Meeting Clients,Zoom Rooms For Conference Room (for Android, iOS, Linux, Mac OS, And Windows)",3.3,LOW,0.0004199999966658652,false,false,false,false,,false,false,2022-11-14T21:15:00.000Z,0
CVE-2022-28763,https://securityvulnerability.io/vulnerability/CVE-2022-28763,Improper URL parsing in Zoom Clients,"The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including session takeovers.",Zoom,"Zoom Client For Meetings (for Android, iOS, Linux, Mac OS, And Windows),Zoom Vdi Windows Meeting Clients,Zoom Rooms For Conference Room (for Android, iOS, Linux, Mac OS, And Windows)",8.8,HIGH,0.001970000099390745,false,false,false,false,,false,false,2022-10-31T20:15:00.000Z,0