QID 379070

Zoom provides video communications with a cloud platform for video and audio conferencing, chat, and webinars across mobile, desktop, and room systems.

Affected Versions:
Zoom Rooms for Windows and macOS before version 5.16.0

QID Detection Logic (Authenticated):
This authenticated QID detects vulnerable Zoom Client and Rooms for affected versions(Windows, Linux and macOS)

Successful exploitation of Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.
Successful exploitation of Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access.
Successful exploitation of Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.