Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior

Críticas / altas1381▼ 36 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior

60 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-42434	Modificada	Media (4.9)	0.49%	—	Zoom Meeting Software Development KIT Zoom Rooms Zoom Rooms Controller Zoom Workplace+2	14/8/2024	17/6/2026	Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
CVE-2024-39825	Analizada	Alta (8.5)	0.63%	—	Zoom Rooms Zoom Workplace Zoom Workplace Desktop Zoom Workplace Virtual Desktop Infrastructure	14/8/2024	17/6/2026	Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.
CVE-2024-39824	Modificada	Media (4.9)	0.51%	—	Zoom Meeting Software Development KIT Zoom Rooms Zoom Rooms Controller Zoom Workplace+2	14/8/2024	17/6/2026	Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
CVE-2024-39823	Modificada	Media (4.9)	0.49%	—	Zoom Meeting Software Development KIT Zoom Rooms Zoom Rooms Controller Zoom Workplace+2	14/8/2024	17/6/2026	Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
CVE-2024-39818	Analizada	Media (6.5)	0.56%	—	Zoom Rooms Zoom Workplace Zoom Workplace Desktop Zoom Workplace Virtual Desktop Infrastructure	14/8/2024	17/6/2026	Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.
CVE-2024-39826	Modificada	Media (6.8)	0.44%	—	Zoom Meeting Software Development KIT Zoom Workplace Desktop Zoom Workplace Virtual Desktop Infrastructure	15/7/2024	17/6/2026	Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access.
CVE-2024-27241	Analizada	Alta (7.5)	0.43%	—	Zoom Meeting Software Development KIT Zoom Rooms Zoom Workplace Zoom Workplace Desktop+1	15/7/2024	17/6/2026	Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
CVE-2024-27240	Analizada	Alta (7.8)	0.17%	—	Zoom Rooms Zoom Workplace Desktop Zoom Workplace Virtual Desktop Infrastructure	15/7/2024	17/6/2026	Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access.
CVE-2024-27244	Analizada	Alta (7.8)	0.10%	—	Zoom Workplace Virtual Desktop Infrastructure	15/5/2024	17/6/2026	Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2024-27243	Analizada	Media (6.5)	0.41%	—	Zoom Meeting Software Development KIT Zoom Workplace Zoom Workplace Desktop Zoom Workplace Virtual Desktop Infrastructure	15/5/2024	17/6/2026	Buffer overflow in some Zoom Workplace Apps and SDK’s may allow an authenticated user to conduct a denial of service via network access.