QID 379079

Zoom provides video communications with a cloud platform for video and audio conferencing, chat, and webinars across mobile, desktop, and room systems.

Affected Versions:
Zoom Desktop Client for Windows, macOS, Linux before version 5.16.0
Zoom VDI Client before version 5.16.0 (excluding 5.14.13 and 5.15.11)
QID Detection Logic (Authenticated):
This authenticated QID detects vulnerable Zoom Client and Rooms for affected versions (Windows, Linux and macOS)

Successful exploitation of Improper conditions checks in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access.
Successful exploitation of Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.
Successful exploitation of Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.
Successful exploitation of Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access.
Successful exploitation of Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.