Vulnerabilities > Zoom > Meetings > 5.1.3

DATE CVE VULNERABILITY TITLE RISK
2021-09-27 CVE-2021-33907 Improper Certificate Validation vulnerability in Zoom Meetings
The Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate the certificate information used to sign .msi files when performing an update of the client.
network
low complexity
zoom CWE-295
critical
9.8
2021-09-27 CVE-2021-34408 Link Following vulnerability in Zoom Meetings
The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the installation or update of the client.
local
low complexity
zoom CWE-59
7.8
2021-09-27 CVE-2021-34412 Improper Privilege Management vulnerability in Zoom Meetings
During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer.
local
low complexity
zoom CWE-269
7.8