Zoom Client For Meetings vulnerabilities

2 CVEs affecting Zoom Client For Meetings, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34420, published 2021-11-11.

More from Zoom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-34419, published 2021-11-11. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a user in the process of in-meeting screen sharing.…
• CVE-2021-34420, published 2021-11-11. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor…