Zoom Vdi Windows Meeting Clients — known CVE vulnerabilities

Every CVE whose affected-product data names Zoom Vdi Windows Meeting Clients, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2024-24691 — CVSS 9.6 (critical): Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an…
• CVE-2022-22782 — CVSS 7.9 (high): The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom…
• CVE-2024-24697 — CVSS 7.2 (high): Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local…
• CVE-2024-24695 — CVSS 6.8 (medium): Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an…
• CVE-2024-24696 — CVSS 6.8 (medium): Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an…
• CVE-2024-24699 — CVSS 6.5 (medium): Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.
• CVE-2024-24690 — CVSS 5.4 (medium): Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.
• CVE-2024-24698 — CVSS 4.9 (medium): Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.
• CVE-2022-28764 — CVSS 3.3 (low): The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information…