CVE-2019-13449: Zoom

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

In the Zoom Client before 4.4.2 on macOS, remote attackers can cause a denial of service (continual focus grabs) via a sequence of invalid launch?action=join&confno= requests to localhost port 19421.

Affected products

• Zoom Zoom: before 4.4.2 (fixed in 4.4.2)

Published 2019-07-09. Last modified 2026-06-17.