# cve.now: Zoom Video Communications, Inc.

The newest entries naming Zoom Video Communications, Inc. as an affected vendor (up to 200), of 117 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2024-27244](https://cve.now/CVE-2024-27244.md): Zoom Workplace VDI App for Windows - Insufficient Verification of Data Authenticity (CVSS 6.7)
- [CVE-2024-27243](https://cve.now/CVE-2024-27243.md): Zoom Apps - Buffer Overflow (CVSS 6.5)
- [CVE-2024-27242](https://cve.now/CVE-2024-27242.md): Zoom Desktop Client for Linux - Cross Site Scripting (CVSS 4.1)
- [CVE-2024-27247](https://cve.now/CVE-2024-27247.md): Zoom Desktop Client for macOS - Improper Privilege Management (CVSS 5.5)
- [CVE-2024-24694](https://cve.now/CVE-2024-24694.md): Zoom Desktop Client for Windows - Improper Privilege Management (CVSS 5.9)
- [CVE-2024-24693](https://cve.now/CVE-2024-24693.md): Zoom Rooms Client for Windows - Improper Access Control (CVSS 7.2)
- [CVE-2024-24692](https://cve.now/CVE-2024-24692.md): Zoom Rooms Client for Windows - Race Condition (CVSS 5.3)
- [CVE-2024-24691](https://cve.now/CVE-2024-24691.md): Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation (CVSS 9.6)
- [CVE-2024-24690](https://cve.now/CVE-2024-24690.md): Zoom Clients - Improper Input Validation (CVSS 5.4)
- [CVE-2024-24699](https://cve.now/CVE-2024-24699.md): Zoom Clients - Business Logic Error (CVSS 6.5)
- [CVE-2024-24698](https://cve.now/CVE-2024-24698.md): Zoom Clients - Improper Authentication (CVSS 4.9)
- [CVE-2024-24697](https://cve.now/CVE-2024-24697.md): Zoom Clients - Untrusted Search Path (CVSS 7.2)
- [CVE-2024-24696](https://cve.now/CVE-2024-24696.md): Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation (CVSS 6.8)
- [CVE-2024-24695](https://cve.now/CVE-2024-24695.md): Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation (CVSS 6.8)
- [CVE-2023-49647](https://cve.now/CVE-2023-49647.md): Zoom Desktop Client for Windows - Improper Access Control (CVSS 8.8)
- [CVE-2023-49646](https://cve.now/CVE-2023-49646.md): Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via… (CVSS 6.4)
- [CVE-2023-43586](https://cve.now/CVE-2023-43586.md): Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to (CVSS 7.3)
- [CVE-2023-43585](https://cve.now/CVE-2023-43585.md): Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a (CVSS 7.1)
- [CVE-2023-43583](https://cve.now/CVE-2023-43583.md): Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow (CVSS 4.9)
- [CVE-2023-43591](https://cve.now/CVE-2023-43591.md): Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of pri (CVSS 7.8)
- [CVE-2023-43590](https://cve.now/CVE-2023-43590.md): Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via loca (CVSS 7.8)
- [CVE-2023-43582](https://cve.now/CVE-2023-43582.md): Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access. (CVSS 5.5)
- [CVE-2023-43588](https://cve.now/CVE-2023-43588.md): Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network a (CVSS 3.5)
- [CVE-2023-39199](https://cve.now/CVE-2023-39199.md): Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network (CVSS 4.9)
- [CVE-2023-39206](https://cve.now/CVE-2023-39206.md): Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access. (CVSS 3.7)
- [CVE-2023-39205](https://cve.now/CVE-2023-39205.md): Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network acce (CVSS 4.3)
- [CVE-2023-39204](https://cve.now/CVE-2023-39204.md): Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access. (CVSS 4.3)
- [CVE-2023-39203](https://cve.now/CVE-2023-39203.md): Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated use (CVSS 4.3)
- [CVE-2023-39202](https://cve.now/CVE-2023-39202.md): Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via lo (CVSS 3.1)
- [CVE-2023-39201](https://cve.now/CVE-2023-39201.md): Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local a (CVSS 7.2)
- [CVE-2023-39208](https://cve.now/CVE-2023-39208.md): Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of s (CVSS 6.5)
- [CVE-2023-39215](https://cve.now/CVE-2023-39215.md): Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access. (CVSS 7.1)
- [CVE-2023-39209](https://cve.now/CVE-2023-39209.md): Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosu (CVSS 5.9)
- [CVE-2023-39214](https://cve.now/CVE-2023-39214.md): Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via… (CVSS 7.6)
- [CVE-2023-39213](https://cve.now/CVE-2023-39213.md): Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticate (CVSS 9.6)
- [CVE-2023-39212](https://cve.now/CVE-2023-39212.md): Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via loc (CVSS 7.9)
- [CVE-2023-39211](https://cve.now/CVE-2023-39211.md): Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to (CVSS 8.8)
- [CVE-2023-39210](https://cve.now/CVE-2023-39210.md): Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an informa (CVSS 5.5)
- [CVE-2023-39218](https://cve.now/CVE-2023-39218.md): Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure (CVSS 6.1)
- [CVE-2023-39217](https://cve.now/CVE-2023-39217.md): Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access. (CVSS 5.3)
- [CVE-2023-39216](https://cve.now/CVE-2023-39216.md): Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of priv (CVSS 9.6)
- [CVE-2023-36535](https://cve.now/CVE-2023-36535.md): Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclos (CVSS 7.1)
- [CVE-2023-36534](https://cve.now/CVE-2023-36534.md): Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via n (CVSS 9.3)
- [CVE-2023-36533](https://cve.now/CVE-2023-36533.md): Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network acc (CVSS 7.1)
- [CVE-2023-36532](https://cve.now/CVE-2023-36532.md): Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. (CVSS 5.9)
- [CVE-2023-36541](https://cve.now/CVE-2023-36541.md): Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an (CVSS 8.0)
- [CVE-2023-36540](https://cve.now/CVE-2023-36540.md): Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escala (CVSS 7.3)
- [CVE-2023-36538](https://cve.now/CVE-2023-36538.md): Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege (CVSS 8.4)
- [CVE-2023-36537](https://cve.now/CVE-2023-36537.md): Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of pri (CVSS 7.3)
- [CVE-2023-36536](https://cve.now/CVE-2023-36536.md): Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escala (CVSS 8.2)
- [CVE-2023-34119](https://cve.now/CVE-2023-34119.md): Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escal (CVSS 8.2)
- [CVE-2023-34118](https://cve.now/CVE-2023-34118.md): Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of pri (CVSS 7.3)
- [CVE-2023-34117](https://cve.now/CVE-2023-34117.md): Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via loc (CVSS 3.3)
- [CVE-2023-34116](https://cve.now/CVE-2023-34116.md): Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalatio (CVSS 8.2)
- [CVE-2023-36539](https://cve.now/CVE-2023-36539.md): Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information. (CVSS 5.3)
- [CVE-2023-34115](https://cve.now/CVE-2023-34115.md): Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denia (CVSS 4.3)
- [CVE-2023-34114](https://cve.now/CVE-2023-34114.md): Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to poten (CVSS 7.4)
- [CVE-2023-34121](https://cve.now/CVE-2023-34121.md): Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated (CVSS 4.1)
- [CVE-2023-34120](https://cve.now/CVE-2023-34120.md): Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an auth (CVSS 8.7)
- [CVE-2023-28603](https://cve.now/CVE-2023-28603.md): Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. (CVSS 7.7)
- [CVE-2023-28602](https://cve.now/CVE-2023-28602.md): Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. (CVSS 2.8)
- [CVE-2023-28601](https://cve.now/CVE-2023-28601.md): Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. (CVSS 8.3)
- [CVE-2023-28600](https://cve.now/CVE-2023-28600.md): Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. (CVSS 5.2)
- [CVE-2023-28599](https://cve.now/CVE-2023-28599.md): Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. (CVSS 4.3)
- [CVE-2023-28598](https://cve.now/CVE-2023-28598.md): Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. (CVSS 7.5)
- [CVE-2023-28597](https://cve.now/CVE-2023-28597.md): Improper trust boundary implementation for SMB in Zoom Clients (CVSS 8.3)
- [CVE-2023-28596](https://cve.now/CVE-2023-28596.md): Local Privilege Escalation in Zoom for macOS Installers (CVSS 7.8)
- [CVE-2023-22883](https://cve.now/CVE-2023-22883.md): Local Privilege Escalation in Zoom for Windows Installers (CVSS 7.2)
- [CVE-2023-22882](https://cve.now/CVE-2023-22882.md): Denial of Service in Zoom Clients (CVSS 6.5)
- [CVE-2023-22881](https://cve.now/CVE-2023-22881.md): Denial of Service in Zoom Clients (CVSS 6.5)
- [CVE-2023-22880](https://cve.now/CVE-2023-22880.md): Information Disclosure in Zoom for Windows Clients (CVSS 6.8)
- [CVE-2022-36930](https://cve.now/CVE-2022-36930.md): Local Privilege Escalation in Zoom Rooms for Windows Installers (CVSS 8.8)
- [CVE-2022-36929](https://cve.now/CVE-2022-36929.md): Local Privilege Escalation in Zoom Rooms for Windows Clients (CVSS 7.8)
- [CVE-2022-36928](https://cve.now/CVE-2022-36928.md): Path Traversal in Zoom for Android Clients (CVSS 6.1)
- [CVE-2022-36927](https://cve.now/CVE-2022-36927.md): Local Privilege Escalation in Zoom Rooms for macOS Clients (CVSS 8.8)
- [CVE-2022-36926](https://cve.now/CVE-2022-36926.md): Local Privilege Escalation in Zoom Rooms for macOS Clients (CVSS 8.8)
- [CVE-2022-36925](https://cve.now/CVE-2022-36925.md): Insecure key generation for Zoom Rooms for macOS Clients (CVSS 4.4)
- [CVE-2022-36924](https://cve.now/CVE-2022-36924.md): Local Privilege Escalation in Zoom Rooms Installer for Windows (CVSS 8.8)
- [CVE-2022-28766](https://cve.now/CVE-2022-28766.md): DLL injection in Zoom Windows Clients (CVSS 3.3)
- [CVE-2022-28768](https://cve.now/CVE-2022-28768.md): Local Privilege Escalation in Zoom Client Installer for macOS (CVSS 8.8)
- [CVE-2022-28764](https://cve.now/CVE-2022-28764.md): Local information exposure in Zoom Clients (CVSS 3.3)
- [CVE-2022-28763](https://cve.now/CVE-2022-28763.md): Improper URL parsing in Zoom Clients (CVSS 8.8)
- [CVE-2022-28761](https://cve.now/CVE-2022-28761.md): Zoom On-Premise Deployments: Improper Access Control (CVSS 6.5)
- [CVE-2022-28759](https://cve.now/CVE-2022-28759.md): Zoom On-Premise Deployments: Improper Access Control (CVSS 8.2)
- [CVE-2022-28760](https://cve.now/CVE-2022-28760.md): Zoom On-Premise Deployments: Improper Access Control (CVSS 6.5)
- [CVE-2022-28762](https://cve.now/CVE-2022-28762.md): Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOS (CVSS 7.3)
- [CVE-2022-28758](https://cve.now/CVE-2022-28758.md): Zoom On-Premise Deployments: Improper Access Control (CVSS 8.2)
- [CVE-2022-28757](https://cve.now/CVE-2022-28757.md): Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS (CVSS 8.8)
- [CVE-2022-28752](https://cve.now/CVE-2022-28752.md): Local Privilege Escalation in the Zoom Rooms for Windows Client (CVSS 8.8)
- [CVE-2022-28751](https://cve.now/CVE-2022-28751.md): Local Privilege Escalation in Zoom Client for Meetings for MacOS (CVSS 8.8)
- [CVE-2022-28756](https://cve.now/CVE-2022-28756.md): Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS (CVSS 8.8)
- [CVE-2022-28755](https://cve.now/CVE-2022-28755.md): Improper URL parsing in Zoom Clients (CVSS 9.6)
- [CVE-2022-28753](https://cve.now/CVE-2022-28753.md): Zoom On-Premise Deployments: Improper Access Control Vulnerability (CVSS 7.1)
- [CVE-2022-28750](https://cve.now/CVE-2022-28750.md): Zoom On-Premise Deployments: Stack Buffer Overflow in Meeting Connector (CVSS 7.5)
- [CVE-2022-28754](https://cve.now/CVE-2022-28754.md): Zoom On-Premise Deployments: Improper Access Control Vulnerability (CVSS 7.1)
- [CVE-2022-28749](https://cve.now/CVE-2022-28749.md): Insufficient Authorization Check During Meeting Join (CVSS 6.5)
- [CVE-2022-22788](https://cve.now/CVE-2022-22788.md): DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients (CVSS 7.1)
- [CVE-2022-22787](https://cve.now/CVE-2022-22787.md): Insufficient hostname validation during Clusterswitch message in Zoom Client for Meetings (CVSS 5.9)
- [CVE-2022-22786](https://cve.now/CVE-2022-22786.md): Update package downgrade in Zoom Client for Meetings for Windows (CVSS 7.5)
- [CVE-2022-22785](https://cve.now/CVE-2022-22785.md): Improperly constrained session cookies in Zoom Client for Meetings (CVSS 5.9)
- [CVE-2022-22784](https://cve.now/CVE-2022-22784.md): Improper XML Parsing in Zoom Client for Meetings (CVSS 8.1)
- [CVE-2022-22783](https://cve.now/CVE-2022-22783.md): Process memory exposure in Zoom on-premise Meeting services (CVSS 6.5)
- [CVE-2022-22782](https://cve.now/CVE-2022-22782.md): Local privilege escalation in Windows Zoom Clients (CVSS 7.9)
- [CVE-2022-22781](https://cve.now/CVE-2022-22781.md): Update package downgrade in Zoom Client for Meetings for MacOS (CVSS 7.5)
- [CVE-2022-22780](https://cve.now/CVE-2022-22780.md): Zoom Chat Susceptible to Zip Bombing (CVSS 4.7)
- [CVE-2022-22779](https://cve.now/CVE-2022-22779.md): Retained exploded messages in Keybase clients for macOS and Windows (CVSS 3.7)
- [CVE-2021-34426](https://cve.now/CVE-2021-34426.md): Arbitrary command execution in Keybase Client for Windows (CVSS 5.3)
- [CVE-2021-34425](https://cve.now/CVE-2021-34425.md): Server Side Request Forgery in Zoom Client for Meetings chat (CVSS 4.7)
- [CVE-2021-34424](https://cve.now/CVE-2021-34424.md): Process memory exposure in Zoom Client and other products (CVSS 5.3)
- [CVE-2021-34423](https://cve.now/CVE-2021-34423.md): Buffer overflow in Zoom client and other products (CVSS 7.3)
- [CVE-2021-34417](https://cve.now/CVE-2021-34417.md): Authenticated remote command execution with root privileges via web console in MMR (CVSS 7.9)
- [CVE-2021-34418](https://cve.now/CVE-2021-34418.md): Pre-auth Null pointer crash in on-premise web console (CVSS 4.0)
- [CVE-2021-34419](https://cve.now/CVE-2021-34419.md): HTML injection in Zoom Linux client (CVSS 3.7)
- [CVE-2021-34420](https://cve.now/CVE-2021-34420.md): Zoom Windows installation executable signature bypass (CVSS 4.7)
- [CVE-2021-34421](https://cve.now/CVE-2021-34421.md): Retained exploded messages in Keybase Clients for Android and iOS (CVSS 3.7)
- [CVE-2021-34422](https://cve.now/CVE-2021-34422.md): Path traversal of file names in Keybase Client for Windows (CVSS 7.2)
- [CVE-2021-34409](https://cve.now/CVE-2021-34409.md): Zoom Client Installer Local Privilege Escalation (CVSS 7.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/zoom-video-communications
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.