Rooms
by Zoom Video Communications, Inc.
CVEs (107)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-42441 | Med | 0.40 | 6.2 | 0.00 | Aug 14, 2024 | Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access. | ||
| CVE-2024-42440 | Med | 0.40 | 6.2 | 0.00 | Aug 14, 2024 | Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access. | ||
| CVE-2023-39218 | Med | 0.40 | 6.1 | 0.01 | Aug 8, 2023 | Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access. | ||
| CVE-2024-45417 | Med | 0.39 | 6.0 | 0.00 | Feb 25, 2025 | Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access. | ||
| CVE-2023-36532 | Med | 0.38 | 5.9 | 0.02 | Aug 8, 2023 | Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. | ||
| CVE-2023-43582 | Med | 0.36 | 5.5 | 0.01 | Nov 15, 2023 | Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access. | ||
| CVE-2024-45418 | Med | 0.35 | 5.4 | 0.00 | Feb 25, 2025 | Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access. | ||
| CVE-2024-24690 | Med | 0.35 | 5.4 | 0.01 | Feb 14, 2024 | Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access. | ||
| CVE-2025-62483 | Med | 0.34 | 5.3 | 0.00 | Nov 13, 2025 | Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access. | ||
| CVE-2025-58133 | Med | 0.34 | 5.3 | 0.00 | Oct 15, 2025 | Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access. | ||
| CVE-2025-58135 | Med | 0.34 | 5.3 | 0.00 | Sep 9, 2025 | Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access. | ||
| CVE-2024-45424 | Med | 0.34 | 5.3 | 0.00 | Feb 25, 2025 | Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access. | ||
| CVE-2024-27241 | Med | 0.34 | 5.3 | 0.00 | Jul 15, 2024 | Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. | ||
| CVE-2024-24692 | Med | 0.34 | 5.3 | 0.00 | Mar 13, 2024 | Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access. | ||
| CVE-2023-36539 | Med | 0.34 | 5.3 | 0.01 | Jun 30, 2023 | Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information. | ||
| CVE-2025-67461 | Med | 0.33 | 5.0 | 0.00 | Dec 10, 2025 | External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access. | ||
| CVE-2024-45426 | Med | 0.32 | 4.9 | 0.00 | Feb 25, 2025 | Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access. | ||
| CVE-2024-45425 | Med | 0.32 | 4.9 | 0.00 | Feb 25, 2025 | Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access. | ||
| CVE-2024-42435 | Med | 0.32 | 4.9 | 0.01 | Aug 14, 2024 | Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access. | ||
| CVE-2024-42434 | Med | 0.32 | 4.9 | 0.00 | Aug 14, 2024 | Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access. |
- risk 0.40cvss 6.2epss 0.00
Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.
- risk 0.40cvss 6.2epss 0.00
Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.
- risk 0.40cvss 6.1epss 0.01
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access.
- risk 0.39cvss 6.0epss 0.00
Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access.
- risk 0.38cvss 5.9epss 0.02
Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.
- risk 0.36cvss 5.5epss 0.01
Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.
- risk 0.35cvss 5.4epss 0.00
Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.
- risk 0.35cvss 5.4epss 0.01
Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.
- risk 0.34cvss 5.3epss 0.00
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
- risk 0.34cvss 5.3epss 0.00
Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.
- risk 0.34cvss 5.3epss 0.00
Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.
- risk 0.34cvss 5.3epss 0.00
Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
- risk 0.34cvss 5.3epss 0.00
Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
- risk 0.34cvss 5.3epss 0.00
Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.
- risk 0.34cvss 5.3epss 0.01
Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
- risk 0.33cvss 5.0epss 0.00
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.
- risk 0.32cvss 4.9epss 0.00
Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
- risk 0.32cvss 4.9epss 0.00
Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
- risk 0.32cvss 4.9epss 0.01
Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
- risk 0.32cvss 4.9epss 0.00
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
Page 4 of 6