Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zoom'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2022-28750 9.8 Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory corruption and could allow a malicious actor to crash the application. In versions older than 2022-08-18 18:37:00
CVE-2022-28756 7.8 The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privi 2022-08-16 17:13:00
CVE-2021-34424 5.0 A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune 2022-07-12 17:42:00
CVE-2021-34415 7.8 The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in incoming network packets, which leads to exhaustion of resources and system crash. 2022-07-12 17:42:00
CVE-2021-34410 7.2 A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook for Mac before 5.0.25611.0521 allows for privilege escalation to root. 2022-07-12 17:42:00
CVE-2021-34408 4.6 The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the installation or update of the client. This could allow for potential privilege escalation if a 2022-07-12 17:42:00
CVE-2020-11469 7.2 Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (with the user's privileges) to obtain root access by replacing runwithroot. 2022-07-12 17:42:00
CVE-2022-22788 6.9 The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom 2022-06-27 17:54:00
CVE-2022-22785 6.4 The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains. This issue could be used in a more sophisticated attack to send an unsuspecting user 2022-05-27 16:13:00
CVE-2022-22786 6.8 The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation version during the update process. This issue could be used in a more sophis 2022-05-27 15:29:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/21
Zapisa po stranici: