Page 13 of 171 results (0.002 seconds)

CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2023-39213

https://notcve.org/view.php?id=CVE-2023-39213

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-176: Improper Handling of Unicode Encoding •

CVSS: 7.9EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-39212

https://notcve.org/view.php?id=CVE-2023-39212

Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-144: Improper Neutralization of Line Delimiters CWE-426: Untrusted Search Path •

CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2023-39211

https://notcve.org/view.php?id=CVE-2023-39211

Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-269: Improper Privilege Management CWE-347: Improper Verification of Cryptographic Signature •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-39210

https://notcve.org/view.php?id=CVE-2023-39210

Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an information disclosure via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-312: Cleartext Storage of Sensitive Information •

CVSS: 6.1EPSS: 0%CPEs: 10EXPL: 0

CVE-2023-39218

https://notcve.org/view.php?id=CVE-2023-39218

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-602: Client-Side Enforcement of Server-Side Security •