CVE-2023-36535
https://notcve.org/view.php?id=CVE-2023-36535
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access. La aplicación del lado del cliente de la seguridad del lado del servidor en los clientes en Zoom anteriores a la versión 5.14.10 puede permitir que un usuario autenticado permita la divulgación de información a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-602: Client-Side Enforcement of Server-Side Security •
CVE-2023-36532
https://notcve.org/view.php?id=CVE-2023-36532
Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. El desbordamiento del búfer en los clientes Zoom anteriores a la versión 5.14.5 puede permitir a un usuario no autenticado activar una denegación de servicio a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2023-36538
https://notcve.org/view.php?id=CVE-2023-36538
Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-284: Improper Access Control •
CVE-2023-36537
https://notcve.org/view.php?id=CVE-2023-36537
Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-269: Improper Privilege Management •
CVE-2023-36536
https://notcve.org/view.php?id=CVE-2023-36536
Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-426: Untrusted Search Path •