CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36534
https://notcve.org/view.php?id=CVE-2023-36534
08 Aug 2023 — Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access. El recorrido de ruta en Zoom Desktop Client para Windows anterior a 5.14.7 puede permitir que un usuario no autenticado habilite una escalada de privilegios a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2023-36533
https://notcve.org/view.php?id=CVE-2023-36533
08 Aug 2023 — Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access. El consumo incontrolado de recursos en los SDK de Zoom anteriores a 5.14.7 puede permitir que un usuario no autenticado habilite una denegación de servicio a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-400: Uncontrolled Resource Consumption CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2023-36532
https://notcve.org/view.php?id=CVE-2023-36532
08 Aug 2023 — Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. El desbordamiento del búfer en los clientes Zoom anteriores a la versión 5.14.5 puede permitir a un usuario no autenticado activar una denegación de servicio a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36541
https://notcve.org/view.php?id=CVE-2023-36541
08 Aug 2023 — Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access. Una verificación insuficiente de la autenticidad de los datos en Zoom Desktop Client para Windows anterior a 5.14.5 puede permitir que un usuario autenticado habilite una escalada de privilegios a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-345: Insufficient Verification of Data Authenticity •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36540
https://notcve.org/view.php?id=CVE-2023-36540
08 Aug 2023 — Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access. Una ruta de búsqueda no fiable en el instalador de Zoom Desktop Client para Windows anterior a 5.14.5 puede permitir que un usuario autenticado habilite una escalada de privilegios mediante acceso local. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-426: Untrusted Search Path •
CVSS: 8.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36538
https://notcve.org/view.php?id=CVE-2023-36538
11 Jul 2023 — Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-284: Improper Access Control CWE-426: Untrusted Search Path •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36537
https://notcve.org/view.php?id=CVE-2023-36537
11 Jul 2023 — Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-269: Improper Privilege Management CWE-354: Improper Validation of Integrity Check Value •
CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36536
https://notcve.org/view.php?id=CVE-2023-36536
11 Jul 2023 — Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-426: Untrusted Search Path •
CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 0CVE-2023-34119
https://notcve.org/view.php?id=CVE-2023-34119
11 Jul 2023 — Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-377: Insecure Temporary File CWE-426: Untrusted Search Path CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-34118
https://notcve.org/view.php?id=CVE-2023-34118
11 Jul 2023 — Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-250: Execution with Unnecessary Privileges CWE-269: Improper Privilege Management •