İçeriğe atla
Noroxi

Zoom kayıtları

zoom üreticisine ait 236 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
10
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

236 kayıt
  • CVE-2004-0680
    41Planlayın

    Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password

    KritikCVSS 10,0İstismar yokEPSS %4

    zoom · model 5560 x3 ethernet adsl modem6 Ağu 2004

  • CVE-2017-15049
    40Planlayın

    The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    zoom · zoom19 Ara 2017

  • CVE-2020-6109
    40Planlayın

    An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs.

    KritikCVSS 9,8İstismar yokEPSS %5

    zoom · zoom8 Haz 2020

  • CVE-2018-15715
    40Planlayın

    Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are v

    KritikCVSS 9,8İstismar yokEPSS %3

    zoom · zoom30 Kas 2018

  • CVE-2021-34423
    40Planlayın

    Buffer overflow in Zoom client and other products

    KritikCVSS 9,8İstismar yokEPSS %3

    zoom · meetings24 Kas 2021

  • CVE-2021-33907
    40Planlayın

    The Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate the certificate information used to sign .m

    KritikCVSS 9,8İstismar yokEPSS %3

    zoom · meetings27 Eyl 2021

  • CVE-2022-28750
    40Planlayın

    Zoom On-Premise Deployments: Stack Buffer Overflow in Meeting Connector

    KritikCVSS 9,8İstismar yokEPSS %2

    zoom · meeting connector11 Ağu 2022

  • CVE-2024-24691
    40Planlayın

    Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation

    KritikCVSS 9,8İstismar yokEPSS %2

    zoom · meeting software development kit13 Şub 2024

  • CVE-2021-34416
    39İzleyin

    The network address administrative settings web portal for the Zoom on-premise Meeting Connector before version 4.6.360.20210325, Zoom on-pr

    KritikCVSS 9,8İstismar yokEPSS %2

    zoom · meeting connector27 Eyl 2021

  • CVE-2023-36534
    39İzleyin

    Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via n

    KritikCVSS 9,8İstismar yokEPSS %2

    zoom · zoom8 Ağu 2023

  • CVE-2023-39213
    39İzleyin

    Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticate

    KritikCVSS 9,8İstismar yokEPSS %1

    zoom · virtual desktop infrastructure8 Ağu 2023

  • CVE-2023-39216
    39İzleyin

    Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of priv

    KritikCVSS 9,8İstismar yokEPSS %1

    zoom · zoom8 Ağu 2023

  • CVE-2025-0147
    39İzleyin

    Zoom Workplace App for Linux - Type Confusion

    KritikCVSS 9,8İstismar yokEPSS %1

    zoom · meeting software development kit30 Oca 2025

  • CVE-2026-53412
    39İzleyin

    Zoom Workplace VDI Plugin for Windows - Improper Input Validation

    KritikCVSS 9,8İstismar yokEPSS %1

    zoom · workplace desktop16 Tem 2026

  • CVE-2026-30903
    39İzleyin

    External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to co

    KritikCVSS 9,8İstismar yokEPSS %0

    zoom · workplace desktop11 Mar 2026

  • CVE-2025-64741
    39İzleyin

    Zoom Workplace for Android - Improper Authorization Handling

    KritikCVSS 9,8İstismar yokEPSS %0

    zoom · meeting software development kit13 Kas 2025

  • CVE-2026-53407
    39İzleyin

    Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allo

    KritikCVSS 9,8İstismar yokEPSS %0

    zoom · workplace12 Haz 2026

  • CVE-2025-62484
    39İzleyin

    Zoom Workplace Clients - Inefficient Regular Expression Complexity

    KritikCVSS 9,8İstismar yokEPSS %0

    zoom · meeting software development kit13 Kas 2025

  • CVE-2017-15048
    38İzleyin

    Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execut

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    zoom · zoom19 Ara 2017

  • CVE-2022-28763
    38İzleyin

    Improper URL parsing in Zoom Clients

    KritikCVSS 9,6İstismar yokEPSS %1

    zoom · meetings31 Eki 2022

  • CVE-2021-30480
    37İzleyin

    Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary code without user inter

    YüksekCVSS 8,8İstismar yokEPSS %6

    zoom · chat9 Nis 2021

  • CVE-2022-22785
    37İzleyin

    Improperly constrained session cookies in Zoom Client for Meetings

    KritikCVSS 9,1İstismar yokEPSS %3

    zoom · meetings18 May 2022

  • CVE-2020-6110
    36İzleyin

    An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code sn

    YüksekCVSS 8,8İstismar yokEPSS %4

    zoom · zoom8 Haz 2020

  • CVE-2019-13567
    36İzleyin

    The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450.

    YüksekCVSS 8,8İstismar yokEPSS %4

    zoom · zoom12 Tem 2019

  • CVE-2025-46788
    36İzleyin

    Zoom Workplace for Linux - Improper Certificate Validation

    KritikCVSS 9,1İstismar yokEPSS %0

    zoom · workplace desktop10 Tem 2025