Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior

Críticas / altas1383▼ 38 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior

84 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-49646	Modificada	Media (6.5)	0.40%	—	Zoom Meeting Software Development KIT Zoom Video Software Development KIT Zoom Virtual Desktop Infrastructure Zoom	13/12/2023	17/6/2026	Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.
CVE-2023-43586	Modificada	Alta (8.8)	0.99%	—	Zoom Meeting Software Development KIT Zoom Video Software Development KIT Zoom Virtual Desktop Infrastructure Zoom	13/12/2023	17/6/2026	Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.
CVE-2023-43585	Modificada	Media (6.5)	0.60%	—	Zoom Meeting Software Development KIT Zoom Video Software Development KIT Zoom	13/12/2023	17/6/2026	Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access.
CVE-2023-43583	Modificada	Media (4.9)	0.57%	—	Zoom Meeting Software Development KIT Zoom Video Software Development KIT Zoom	13/12/2023	17/6/2026	Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow a privileged user to conduct a disclosure of information via network access.
CVE-2023-39215	Modificada	Media (6.5)	1.1%	—	Zoom Meeting Software Development KIT Zoom Virtual Desktop Infrastructure Zoom	12/9/2023	17/6/2026	Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.
CVE-2023-39214	Modificada	Alta (8.1)	0.96%	—	Zoom Meeting Software Development KIT Zoom Rooms Zoom	8/8/2023	17/6/2026	Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.
CVE-2023-39210	Modificada	Media (5.5)	0.13%	—	Zoom Meeting Software Development KIT	8/8/2023	17/6/2026	Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an information disclosure via local access.
CVE-2023-39217	Modificada	Alta (7.5)	1.6%	—	Zoom Meeting Software Development KIT Zoom Video Software Development KIT	8/8/2023	17/6/2026	Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access.
CVE-2023-36533	Modificada	Alta (7.5)	0.81%	—	Zoom Meeting Software Development KIT Zoom Video Software Development KIT	8/8/2023	17/6/2026	Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access.