Vulnerabilities (CVE)

Filtered by vendor Zoom Subscribe
Filtered by product Zoom
Total 62 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-13449 1 Zoom 1 Zoom 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
In the Zoom Client before 4.4.2 on macOS, remote attackers can cause a denial of service (continual focus grabs) via a sequence of invalid launch?action=join&confno= requests to localhost port 19421.
CVE-2018-15715 1 Zoom 1 Zoom 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to unauthorized message processing. A remote unauthenticated attacker can spoof UDP messages from a meeting attendee or Zoom server in order to invoke functionality in the target client. This allows the attacker to remove attendees from meetings, spoof messages from users, or hijack shared screens.