Zoom Workplace vulnerabilities
8 known vulnerabilities in Zoom Workplace from Zoom Communications. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.0 High severity
Zoom Workplace: Buffer Copy without Checking Size of Input
Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.
- 8.1 High severity
Zoom Workplace: Improper Authorization in Handler for Custom URL Scheme
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.
- 8.1 High severity
Zoom Workplace: Improper Authorization in Handler for Custom URL Scheme
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.
- 9.8 Critical severity
Zoom Workplace: Improper Authorization in Handler for Custom URL Scheme
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.
- 9.8 Critical severity
Zoom Workplace: Externally Controlled Reference to a Resource in Another Sphere
External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.
- 7.8 High severity
Zoom Workplace: Improper Privilege Management
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
- 7.8 High severity
Zoom Workplace: Improper Check for Unusual or Exceptional Conditions
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
- 9.8 Critical severity
Zoom Workplace: Inefficient Regular Expression Complexity
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.