# Zoom Skype for Business Plugin security updates

The latest version of Zoom Skype for Business Plugin is 5.13.10, released February 21, 2023. Patch Radar has 0 security fixes for Zoom Skype for Business Plugin, closing 0 CVEs. 36 CVEs have no fix yet.

- Web page: https://patchblox.com/security/product/windows-app/zoom-skype-for-business-plugin
- Platform: Windows apps
- Vendor: Zoom
- Latest version: 5.13.10 (Feb 21, 2023)
- Supported: yes

## CVEs with no fix yet

| CVE | Priority | Title | Status |
|---|---|---|---|
| [CVE-2023-36534](https://patchblox.com/security/data/cve/CVE-2023-36534.md) | Urgent | Zoom Skype for Business Plugin: Path Traversal | no-fix |
| [CVE-2023-39213](https://patchblox.com/security/data/cve/CVE-2023-39213.md) | Urgent | Zoom Skype for Business Plugin: Improper Handling of Unicode Encoding | no-fix |
| [CVE-2023-39216](https://patchblox.com/security/data/cve/CVE-2023-39216.md) | Urgent | Zoom Skype for Business Plugin: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | no-fix |
| [CVE-2024-24691](https://patchblox.com/security/data/cve/CVE-2024-24691.md) | Urgent | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation | no-fix |
| [CVE-2023-34116](https://patchblox.com/security/data/cve/CVE-2023-34116.md) | High | Zoom Skype for Business Plugin: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | no-fix |
| [CVE-2023-34120](https://patchblox.com/security/data/cve/CVE-2023-34120.md) | High | Zoom Skype for Business Plugin: Improper Verification of Cryptographic Signature | no-fix |
| [CVE-2023-34121](https://patchblox.com/security/data/cve/CVE-2023-34121.md) | High | Zoom Skype for Business Plugin: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') | no-fix |
| [CVE-2023-36532](https://patchblox.com/security/data/cve/CVE-2023-36532.md) | High | Zoom Skype for Business Plugin: Buffer Overflow | no-fix |
| [CVE-2023-36540](https://patchblox.com/security/data/cve/CVE-2023-36540.md) | High | Zoom Skype for Business Plugin: Untrusted Search Path | no-fix |
| [CVE-2023-36541](https://patchblox.com/security/data/cve/CVE-2023-36541.md) | High | Zoom Skype for Business Plugin: Insufficient Verification of Data Authenticity | no-fix |
| [CVE-2023-39203](https://patchblox.com/security/data/cve/CVE-2023-39203.md) | High | Zoom Skype for Business Plugin: Memory Allocation with Excessive Size Value | no-fix |
| [CVE-2023-39204](https://patchblox.com/security/data/cve/CVE-2023-39204.md) | High | Zoom Skype for Business Plugin: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | no-fix |
| [CVE-2023-39206](https://patchblox.com/security/data/cve/CVE-2023-39206.md) | High | Zoom Skype for Business Plugin: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | no-fix |
| [CVE-2023-39211](https://patchblox.com/security/data/cve/CVE-2023-39211.md) | High | Zoom Skype for Business Plugin: Improper Verification of Cryptographic Signature | no-fix |
| [CVE-2023-39214](https://patchblox.com/security/data/cve/CVE-2023-39214.md) | High | Zoom Skype for Business Plugin: Exposed Dangerous Method or Function | no-fix |
| [CVE-2023-43582](https://patchblox.com/security/data/cve/CVE-2023-43582.md) | High | Zoom Skype for Business Plugin: Improper Authorization in Handler for Custom URL Scheme | no-fix |
| [CVE-2023-43586](https://patchblox.com/security/data/cve/CVE-2023-43586.md) | High | Zoom Skype for Business Plugin: Untrusted Search Path | no-fix |
| [CVE-2023-49647](https://patchblox.com/security/data/cve/CVE-2023-49647.md) | High | Zoom Desktop Client for Windows - Improper Access Control | no-fix |
| [CVE-2024-24697](https://patchblox.com/security/data/cve/CVE-2024-24697.md) | High | Zoom Clients - Untrusted Search Path | no-fix |
| [CVE-2023-28601](https://patchblox.com/security/data/cve/CVE-2023-28601.md) | Routine | Zoom Skype for Business Plugin: Improperly Implemented Security Check for Standard | no-fix |
| [CVE-2023-34114](https://patchblox.com/security/data/cve/CVE-2023-34114.md) | Routine | Zoom Skype for Business Plugin: Exposure of Resource to Wrong Sphere | no-fix |
| [CVE-2023-36535](https://patchblox.com/security/data/cve/CVE-2023-36535.md) | Routine | Zoom Skype for Business Plugin: The UI Performs the Wrong Action | no-fix |
| [CVE-2023-39199](https://patchblox.com/security/data/cve/CVE-2023-39199.md) | Routine | Zoom Skype for Business Plugin: Missing Cryptographic Step | no-fix |
| [CVE-2023-39205](https://patchblox.com/security/data/cve/CVE-2023-39205.md) | Routine | Zoom Skype for Business Plugin: Improper Check for Unusual or Exceptional Conditions | no-fix |
| [CVE-2023-39209](https://patchblox.com/security/data/cve/CVE-2023-39209.md) | Routine | Zoom Skype for Business Plugin: The UI Performs the Wrong Action | no-fix |
| [CVE-2023-39215](https://patchblox.com/security/data/cve/CVE-2023-39215.md) | Routine | Zoom Skype for Business Plugin: The UI Performs the Wrong Action | no-fix |
| [CVE-2023-39218](https://patchblox.com/security/data/cve/CVE-2023-39218.md) | Routine | Zoom Skype for Business Plugin: Client-Side Enforcement of Server-Side Security | no-fix |
| [CVE-2023-43588](https://patchblox.com/security/data/cve/CVE-2023-43588.md) | Routine | Zoom Skype for Business Plugin: The UI Performs the Wrong Action | no-fix |
| [CVE-2023-49646](https://patchblox.com/security/data/cve/CVE-2023-49646.md) | Routine | Zoom Skype for Business Plugin: Improper Verification of Cryptographic Signature | no-fix |
| [CVE-2024-24690](https://patchblox.com/security/data/cve/CVE-2024-24690.md) | Routine | Zoom Clients - Improper Input Validation | no-fix |
| [CVE-2024-24695](https://patchblox.com/security/data/cve/CVE-2024-24695.md) | Routine | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation | no-fix |
| [CVE-2024-24696](https://patchblox.com/security/data/cve/CVE-2024-24696.md) | Routine | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation | no-fix |
| [CVE-2024-24698](https://patchblox.com/security/data/cve/CVE-2024-24698.md) | Routine | Zoom Clients - Improper Authentication | no-fix |
| [CVE-2024-24699](https://patchblox.com/security/data/cve/CVE-2024-24699.md) | Routine | Zoom Clients - Business Logic Error | no-fix |
| [CVE-2025-49462](https://patchblox.com/security/data/cve/CVE-2025-49462.md) | Routine | Zoom Clients - Cross-site Scripting | no-fix |
| [CVE-2025-49464](https://patchblox.com/security/data/cve/CVE-2025-49464.md) | Routine | Zoom Clients for Windows- Classic Buffer Overflow | no-fix |

## Security fixes, newest first

No security fix is on record.

---

Data as of 2026-11-12T07:53:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.