Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-08	CVE-2023-39213	Injection vulnerability in Zoom Virtual Desktop Infrastructure and Zoom Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access. network low complexity zoom CWE-74 critical	9.8
2022-10-31	CVE-2022-28763	Open Redirect vulnerability in Zoom Meetings and Virtual Desktop Infrastructure The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. network low complexity zoom CWE-601 critical	9.6