Virtual Desktop Infrastructure vulnerabilities
11 known vulnerabilities in Virtual Desktop Infrastructure from Zoom. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Improper input validation in the installer for some Zoom Apps for Windows may allow an…
Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access.
- 7.8 High severity
Zoom Desktop Client for Windows, Zoom VDI…: Incorrect Privilege Assignment
Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access.
- 8.8 High severity
Zoom Desktop Client for Windows, Zoom VDI…: Improper Limitation of a Pathname to a Restricted Directory
Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.
- 7.5 High severity
Zoom Rooms Client for Windows and Zoom VDI…: Memory Allocation with Excessive Size Value
Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network access.
- 9.8 Critical severity
Zoom Desktop Client for Windows and Zoom VDI…: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.
- 8.8 High severity
Zoom for Windows: Improper Neutralization of Input During Web Page Generation
Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access.
- 7.8 High severity
Zoom for Windows Client: Improper Verification of Cryptographic Signature
Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher le
- 7.1 High severity
Zoom VDI Windows Meeting Client: External Control of File Name or Path
Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions.
- 7.5 High severity
Zoom (for Android, iOS, Linux, macOS, and…: Trust Boundary Violation
Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the vi
- 7.5 High severity
Zoom for Windows: Exposure of Sensitive Information to an Unauthorized Actor
Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by
- 9.6 Critical severity
Zoom Client for Meetings (for Android, iOS…: URL Redirection to Untrusted Site
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network