Zoom Clients vulnerabilities
7 known vulnerabilities in Zoom Clients from Zoom Communications. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.4 High severity
Zoom Clients: Improper Certificate Validation
Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.
- 7.4 High severity
Zoom Clients: Improper Certificate Validation
Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.
- 8.3 High severity
Zoom Clients: Use After Free
Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access.
- 8.3 High severity
Zoom Clients: Out-of-bounds Write
Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.
- 7.0 High severity
Zoom Clients: Time-of-check Time-of-use (TOCTOU) Race Condition
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
- 7.5 High severity
Zoom Clients: External Control of File Name or Path
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
- 7.5 High severity
Zoom Clients: Improper Removal of Sensitive Information Before Storage or Transfer
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.