Zoom Desktop Client for Windows, Zoom VDI Client for Windows and Zoom SDKs for Windows vulnerabilities

2 known vulnerabilities in Zoom Desktop Client for Windows, Zoom VDI Client for Windows and Zoom SDKs for Windows from Zoom Video Communications. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Zoom Desktop Client for Windows, Zoom VDI…: Incorrect Privilege Assignment

  CVE-2023-49647Jan 12, 2024Zoom Video Communications

  Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access.

• 8.8 High severity

  Zoom Desktop Client for Windows, Zoom VDI…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-43586Dec 13, 2023Zoom Video Communications

  Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.