Approved changes feed: RSS · Atom

cpe:2.3:a:zoom_video_communications,_inc.:zoom_clients:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZoom Video Communications, Inc. (40e3ad3c-5bb8-57cd-ab3a-b450c1340e8f)
ProductZoom Clients (73c658a4-d674-5147-83ba-9445a4a8c147)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24699 vulnerable 2026-06-03 14:55:05.556174 Zoom Clients - Business Logic Error
MEDIUM (6.5)
Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.
Published: 2024-02-13T23:58:44.327Z
Updated: 2025-03-13T17:31:26.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24698 vulnerable 2026-06-03 14:55:05.555484 Zoom Clients - Improper Authentication
MEDIUM (4.9)
Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.
Published: 2024-02-13T23:56:14.515Z
Updated: 2024-09-27T19:28:28.333Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24697 vulnerable 2026-06-03 14:55:05.555032 Zoom Clients - Untrusted Search Path
HIGH (7.2)
Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access.
Published: 2024-02-13T23:53:43.589Z
Updated: 2025-05-08T15:34:41.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24690 vulnerable 2026-06-03 14:55:05.536306 Zoom Clients - Improper Input Validation
MEDIUM (5.4)
Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-02-14T00:00:04.089Z
Updated: 2024-09-20T14:50:06.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49646 vulnerable 2026-06-03 14:53:20.917449 Details available
MEDIUM (6.4)
Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.
Published: 2023-12-13T22:19:26.963Z
Updated: 2024-09-20T14:53:41.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43588 vulnerable 2026-06-03 14:53:04.331046 Details available
LOW (3.5)
Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.
Published: 2023-11-14T23:11:18.161Z
Updated: 2024-09-20T14:58:08.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43582 vulnerable 2026-06-03 14:53:04.309506 Details available
MEDIUM (5.5)
Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.
Published: 2023-11-14T23:12:32.799Z
Updated: 2024-09-19T13:52:36.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39218 vulnerable 2026-06-03 14:52:37.944849 Details available
MEDIUM (6.1)
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access.
Published: 2023-08-08T17:54:59.577Z
Updated: 2024-10-10T16:20:58.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39215 vulnerable 2026-06-03 14:52:37.939418 Details available
HIGH (7.1)
Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.
Published: 2023-09-12T19:53:25.817Z
Updated: 2024-09-27T19:08:23.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39206 vulnerable 2026-06-03 14:52:37.921986 Details available
LOW (3.7)
Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.
Published: 2023-11-14T23:02:41.332Z
Updated: 2024-08-29T15:45:07.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39205 vulnerable 2026-06-03 14:52:37.921189 Details available
MEDIUM (4.3)
Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access.
Published: 2023-11-14T22:32:18.711Z
Updated: 2024-08-29T15:20:19.803Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39204 vulnerable 2026-06-03 14:52:37.916163 Details available
MEDIUM (4.3)
Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.
Published: 2023-11-14T22:28:44.622Z
Updated: 2024-08-29T15:20:45.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39199 vulnerable 2026-06-03 14:52:37.900908 Details available
MEDIUM (4.9)
Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access.
Published: 2023-11-14T23:06:21.805Z
Updated: 2024-09-19T13:50:58.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36539 vulnerable 2026-06-03 14:52:26.599996 Details available
MEDIUM (5.3)
Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
Published: 2023-06-30T02:01:21.401Z
Updated: 2024-10-28T13:04:46.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36535 vulnerable 2026-06-03 14:52:26.596140 Details available
HIGH (7.1)
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.
Published: 2023-08-08T17:39:51.259Z
Updated: 2024-10-08T15:03:49.453Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36532 vulnerable 2026-06-03 14:52:26.576654 Details available
MEDIUM (5.9)
Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.
Published: 2023-08-08T17:30:58.217Z
Updated: 2024-10-09T16:25:28.757Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.