Zoom Video Communications Inc Zoom Rooms For Windows vulnerabilities

CVE-2022-36930 [HIGH] CWE-427 CVE-2022-36930: Zoom Rooms for Windows installers before version 5.13.0 contain a local privilege escalation vulnera Zoom Rooms for Windows installers before version 5.13.0 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain to escalate their privileges to the SYSTEM user.

CVE-2023-22880 [HIGH] CWE-200 CVE-2023-22880: Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitted text to Microsoft’s online Spellcheck service instead

CVE-2022-36929 [HIGH] CWE-367 CVE-2022-36929: The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerabi The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user.

CVE-2023-34119 [HIGH] CWE-426 CVE-2023-34119: Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.

CVE-2023-36536 [HIGH] CWE-426 CVE-2023-36536: Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow a Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.

CVE-2023-36538 [HIGH] CWE-426 CVE-2023-36538: Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated u Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.

CVE-2023-34118 [HIGH] CWE-250 CVE-2023-34118: Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authentic Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.

CVE-2023-36537 [HIGH] CWE-354 CVE-2023-36537: Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authentic Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.

CVE-2023-39212 [MEDIUM] CWE-144 CVE-2023-39212: Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated us Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.