Known vulnerabilities in Zoom Workplace App for iOS - page 3

Vendor: Zoom Video Communications, Inc.
Software: Zoom Workplace App for iOS
Software CPE: cpe:2.3:a:zoom_video_communications:zoom_client_for_ios:*:*:*:*:*:*:*:*
Website: https://zoom.us/
Total vulnerabilities: 56
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zoom Workplace App for iOS Zoom Workplace App for iOS is affected by 56 known vulnerabilities: 9 high, 20 medium, 27 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91691 - Use After Free
CVE-2024-27246		 CWE-416 Low
No
No
 5.17.11 14172 11.06.2024 SB20240611218
SB2025031705
#VU91690 - Memory corruption
CVE-2024-27245		 CWE-119 Low
No
No
 5.17.11 14172 11.06.2024 SB20240611218
SB2025031704
#VU79369 - Exposure of sensitive information to an unauthorized actor
CVE-2023-39218		 CWE-200 Medium
No
No
 5.14.0 7270 10.08.2023 SB2023081030
#VU79368 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36535		 CWE-200 Medium
No
No
 5.14.0 7270 10.08.2023 SB2023081030
#VU77820 - Cleartext Transmission of Sensitive Information
CVE-2023-36539		 CWE-319 Low
No
No
 5.15.2 8833 30.06.2023 SB2023063005
#VU77151 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-28599		 CWE-94 Low
No
No
 5.13.10 7012 12.06.2023 SB2023061220
#VU73695 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2023-22885		 CWE-300 Medium
No
No
 5.13.5 6434 15.03.2023 SB2023031504
#VU73694 - Improper input validation
CVE-2023-22882		 CWE-20 Medium
No
No
 5.13.5 6434 15.03.2023 SB2023031504
#VU73693 - Improper input validation
CVE-2023-22881		 CWE-20 Medium
No
No
 5.13.5 6434 15.03.2023 SB2023031504
#VU69235 - Exposure of sensitive information to an unauthorized actor
CVE-2022-28764		 CWE-200 Low
No
No
 5.12.8 5518 11.11.2022 SB2022111103
SB2022111105
SB2022111106
#VU68630 - Improper input validation
CVE-2022-28763		 CWE-20 High
No
No
 5.12.2 4920 25.10.2022 SB2022102501
SB2022102503
SB2022102505
#VU66376 - Improper input validation
CVE-2022-28755		 CWE-20 High
No
No
 5.11.1 3887 10.08.2022 SB2022081050
#VU63593 - Resource exhaustion
CVE-2022-22780		 CWE-400 Low
No
No
 5.9.0 2086 24.05.2022 SB2022020859
#VU63591 - Improper Validation of Certificate with Host Mismatch
CVE-2022-22787		 CWE-297 Medium
No
No
 5.10.0 2988 24.05.2022 SB2022052417
#VU63588 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22785		 CWE-200 Low
No
No
 5.10.0 2988 24.05.2022 SB2022052417
#VU63587 - XML Injection
CVE-2022-22784		 CWE-91 Medium
No
No
 5.10.0 2988 24.05.2022 SB2022052417


Showing elements 41 - 60 out of 56