CVSS: 6.8EPSS: 0%CPEs: 16EXPL: 0CVE-2023-39199
https://notcve.org/view.php?id=CVE-2023-39199
14 Nov 2023 — Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access. Los problemas criptográficos con el chat durante la reunión para algunos clientes de Zoom pueden permitir que un usuario privilegiado realice una divulgación de información a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-310: Cryptographic Issues CWE-325: Missing Cryptographic Step •
CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0CVE-2023-39206
https://notcve.org/view.php?id=CVE-2023-39206
14 Nov 2023 — Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access. El desbordamiento del búfer en algunos clientes de Zoom puede permitir que un usuario no autenticado realice una denegación de servicio a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0CVE-2023-39204
https://notcve.org/view.php?id=CVE-2023-39204
14 Nov 2023 — Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access. El desbordamiento del búfer en algunos clientes de Zoom puede permitir que un usuario no autenticado realice una denegación de servicio a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-39202
https://notcve.org/view.php?id=CVE-2023-39202
14 Nov 2023 — Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access. Una ruta de búsqueda no confiable en Zoom Rooms Client para Windows y Zoom VDI Client puede permitir que un usuario privilegiado realice una denegación de servicio a través del acceso local. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-426: Untrusted Search Path •
CVSS: 8.5EPSS: 0%CPEs: 12EXPL: 0CVE-2023-39214
https://notcve.org/view.php?id=CVE-2023-39214
08 Aug 2023 — Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-668: Exposure of Resource to Wrong Sphere CWE-749: Exposed Dangerous Method or Function •
CVSS: 7.9EPSS: 0%CPEs: 1EXPL: 0CVE-2023-39212
https://notcve.org/view.php?id=CVE-2023-39212
08 Aug 2023 — Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-144: Improper Neutralization of Line Delimiters CWE-426: Untrusted Search Path •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2023-39211
https://notcve.org/view.php?id=CVE-2023-39211
08 Aug 2023 — Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-269: Improper Privilege Management CWE-347: Improper Verification of Cryptographic Signature •
CVSS: 6.1EPSS: 0%CPEs: 10EXPL: 0CVE-2023-39218
https://notcve.org/view.php?id=CVE-2023-39218
08 Aug 2023 — Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-602: Client-Side Enforcement of Server-Side Security •
CVSS: 7.1EPSS: 0%CPEs: 10EXPL: 0CVE-2023-36535
https://notcve.org/view.php?id=CVE-2023-36535
08 Aug 2023 — Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access. La aplicación del lado del cliente de la seguridad del lado del servidor en los clientes en Zoom anteriores a la versión 5.14.10 puede permitir que un usuario autenticado permita la divulgación de información a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-449: The UI Performs the Wrong Action CWE-602: Client-Side Enforcement of Server-Side Security •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2023-36532
https://notcve.org/view.php?id=CVE-2023-36532
08 Aug 2023 — Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. El desbordamiento del búfer en los clientes Zoom anteriores a la versión 5.14.5 puede permitir a un usuario no autenticado activar una denegación de servicio a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •