ZC
Product
Zoom clients
16
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 10Low 0
Watch
Add Zoom clients to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-43582 | 8.8 | Nov 14 | Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access Affected: see references |
| CVE-2024-24697 | 7.8 | Feb 13 | Zoom Clients - Untrusted Search Path Affected: see references |
| CVE-2023-39206 | 7.5 | Nov 14 | Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access Affected: see references |
| CVE-2023-39204 | 7.5 | Nov 14 | Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access Affected: see references |
| CVE-2023-36532 | 7.5 | Aug 8 | Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access Affected: before 5.14.5 |
| CVE-2023-36539 | 7.5 | Jun 30 | Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information Affected: See references link for ZSB-23025 |
| CVE-2024-24690 | 6.5 | Feb 14 | Zoom Clients - Improper Input Validation Affected: see references |
| CVE-2024-24699 | 6.5 | Feb 13 | Zoom Clients - Business Logic Error Affected: see references |
| CVE-2023-49646 | 6.5 | Dec 13 | Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access Affected: See references |
| CVE-2023-43588 | 6.5 | Nov 14 | Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access Affected: see references |
| CVE-2023-39199 | 6.5 | Nov 14 | Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access Affected: see references |
| CVE-2023-39205 | 6.5 | Nov 14 | Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access Affected: see references |
| CVE-2023-39215 | 6.5 | Sep 12 | Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access Affected: see reference |
| CVE-2023-36535 | 6.5 | Aug 8 | Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access Affected: before 5.14.10 |
| CVE-2023-39218 | 4.9 | Aug 8 | Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access Affected: before 5.14.10 |
| CVE-2024-24698 | 4.4 | Feb 13 | Zoom Clients - Improper Authentication Affected: see references |
Showing 16
