Zoom Video Communications Inc Zoom Clients vulnerabilities

CVE-2023-43582 [HIGH] CWE-939 CVE-2023-43582: Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

CVE-2023-36532 [HIGH] CWE-122 CVE-2023-36532: Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial o Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.

CVE-2023-39206 [HIGH] CWE-120 CVE-2023-39206: Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of servic Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

CVE-2023-39204 [HIGH] CWE-120 CVE-2023-39204: Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of servic Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

CVE-2024-24697 [HIGH] CWE-426 CVE-2024-24697: Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access.

CVE-2023-36539 [HIGH] CWE-200 CVE-2023-36539: Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sens Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.

CVE-2024-24699 [MEDIUM] CVE-2024-24699: Business logic error in some Zoom clients may allow an authenticated user to conduct information dis Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.

CVE-2023-43588 [MEDIUM] CWE-449 CVE-2023-43588: Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.

CVE-2023-36535 [MEDIUM] CWE-449 CVE-2023-36535: Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenti Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.

CVE-2023-39199 [MEDIUM] CWE-325 CVE-2023-39199: Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to condu Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access.

CVE-2024-24690 [MEDIUM] CWE-1284 CVE-2024-24690: Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial o Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.

CVE-2023-39215 [MEDIUM] CWE-449 CVE-2023-39215: Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of servi Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.

CVE-2023-39205 [MEDIUM] CWE-754 CVE-2023-39205: Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to cond Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access.

CVE-2023-49646 [MEDIUM] CWE-347 CVE-2023-49646: Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user t Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.

CVE-2023-39218 [MEDIUM] CWE-602 CVE-2023-39218: Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privilege Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access.

CVE-2024-24698 [MEDIUM] CWE-449 CVE-2024-24698: Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.