Advisories · Technology
Zoom Video Communications, Inc. Zoom Desktop Client for Windows.
Every CVE that names Zoom Video Communications, Inc. Zoom Desktop Client for Windows among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
Zoom Desktop Client for Windows - Improper Privilege Management
- Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- Weak cryptography or TLS
- CVSS 5.9 Medium
Zoom Video Communications…: Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an…
- Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- CWE-449
- CVSS 9.6 CriticalCritical · CVSS 9+
Cross-site scripting in Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
Path traversal in Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- Path traversal
- CVSS 8.0 High
Insufficient verification of data authenticity in Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- CWE-345
- CVSS 7.3 High
Untrusted search path in Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- CWE-426
- CVSS 8.2 High
OS command injection in Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- Zoom Video Communications, Inc. Zoom Desktop Client for Windows
- Command injection