Zoom Rooms for Windows vulnerabilities
8 known vulnerabilities in Zoom Rooms for Windows from Zoom Video Communications. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Zoom Rooms for Windows: Untrusted Search Path
Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
- 7.8 High severity
Zoom Rooms for Windows: Improper Validation of Integrity Check Value
Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
- 7.8 High severity
Zoom Rooms for Windows: Untrusted Search Path
Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
- 7.8 High severity
Zoom Rooms for Windows: Exposure of Resource to Wrong Sphere
Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
- 7.8 High severity
Zoom Rooms for Windows: Execution with Unnecessary Privileges
Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
- 7.5 High severity
Zoom for Windows: Exposure of Sensitive Information to an Unauthorized Actor
Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by
- 7.8 High severity
Zoom Rooms for Windows: Uncontrolled Search Path Element
Zoom Rooms for Windows installers before version 5.13.0 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain to escalate their privileges to the SYSTEM user.
- 7.8 High severity
Zoom Rooms for Windows: Time-of-check Time-of-use (TOCTOU) Race Condition
The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user.