Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Rooms
(Zoom)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 60 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2023-03-16 | CVE-2023-22880 | Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitted text to Microsoft’s online Spellcheck service instead of the local Windows Spellcheck. Updating Zoom remediates this vulnerability by disabling the feature. Updating Microsoft Edge WebView2 Runtime... | Rooms, Virtual_desktop_infrastructure, Zoom | 7.5 | ||
2023-06-13 | CVE-2023-34121 | Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access. | Rooms, Virtual_desktop_infrastructure, Zoom | 8.8 | ||
2023-06-30 | CVE-2023-36539 | Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information. | Meetings, Poly_ccx_600_firmware, Poly_ccx_700_firmware, Rooms, Video_software_development_kit, Yealink_mp54_firmware, Yealink_mp56_firmware, Yealink_vp59_firmware, Zoom | 7.5 | ||
2023-07-11 | CVE-2023-34118 | Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access. | Rooms | 7.8 | ||
2023-07-11 | CVE-2023-34119 | Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. | Rooms | 7.8 | ||
2023-07-11 | CVE-2023-36536 | Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. | Rooms | 7.8 | ||
2023-07-11 | CVE-2023-36537 | Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access. | Rooms | 7.8 | ||
2023-07-11 | CVE-2023-36538 | Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. | Rooms | 7.8 | ||
2023-08-08 | CVE-2023-36532 | Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. | Rooms, Virtual_desktop_infrastructure, Zoom | 7.5 | ||
2023-08-08 | CVE-2023-36535 | Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access. | Rooms, Virtual_desktop_infrastructure, Zoom | 6.5 |