Loading HuntDB...

CVE-2024-45422

MEDIUM

Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access.

Published Nov 19, 2024

CVE-2024-45420

MEDIUM

Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access.

Published Nov 19, 2024

CVE-2024-45419

HIGH

Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.

Published Nov 19, 2024

CVE-2024-42441

MEDIUM

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

Published Aug 14, 2024

CVE-2024-42440

MEDIUM

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

Published Aug 14, 2024

CVE-2024-42439

MEDIUM

Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access.

Published Aug 14, 2024

CVE-2024-42438

MEDIUM

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

Published Aug 14, 2024

CVE-2024-42437

MEDIUM

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

Published Aug 14, 2024

CVE-2024-42436

MEDIUM

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

Published Aug 14, 2024

CVE-2024-42435

MEDIUM

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Published Aug 14, 2024

CVE-2024-42434

MEDIUM

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Published Aug 14, 2024

CVE-2024-39824

MEDIUM

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Published Aug 14, 2024

CVE-2024-39823

MEDIUM

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Published Aug 14, 2024

CVE-2024-39822

MEDIUM

Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.

Published Aug 14, 2024

CVE-2024-39818

HIGH

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.

Published Aug 14, 2024

CVE-2024-39825

HIGH

Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.

Published Aug 14, 2024

CVE-2024-39821

MEDIUM

Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access.

Published Jul 15, 2024

CVE-2024-39820

MEDIUM

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.

Published Jul 15, 2024

CVE-2024-39819

MEDIUM

Improper privilege management in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access.

Published Jul 15, 2024

CVE-2024-39827

MEDIUM

Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.

Published Jul 15, 2024

CVE-2024-39826

MEDIUM

Path traversal in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access.

Published Jul 15, 2024

CVE-2024-27238

HIGH

Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access.

Published Jul 15, 2024

CVE-2024-27241

MEDIUM

Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.

Published Jul 15, 2024

CVE-2024-27240

HIGH

Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access.

Published Jul 15, 2024