Windows apps · Zoom
Zoom Skype for Business Plugin security updates
The latest version of Zoom Skype for Business Plugin is 5.13.10, released February 21, 2023. Patch Radar has 0 security fixes for Zoom Skype for Business Plugin, closing 0 CVEs. 36 CVEs have no fix yet.
36 with no fix yet
Latest version
5.13.10
Released Feb 21, 2023
Security fixes
0
On record in Patch Radar
CVEs
0
Closed by those fixes
Exploited
0
Vendor report or CISA KEV
CVEs with no fix yet
| Priority | CVE | Title | Status |
|---|---|---|---|
| Urgent | CVE-2023-36534 | Zoom Skype for Business Plugin: Path Traversal | no-fix |
| Urgent | CVE-2023-39213 | Zoom Skype for Business Plugin: Improper Handling of Unicode Encoding | no-fix |
| Urgent | CVE-2023-39216 | Zoom Skype for Business Plugin: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | no-fix |
| Urgent | CVE-2024-24691 | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation | no-fix |
| High | CVE-2023-34116 | Zoom Skype for Business Plugin: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | no-fix |
| High | CVE-2023-34120 | Zoom Skype for Business Plugin: Improper Verification of Cryptographic Signature | no-fix |
| High | CVE-2023-34121 | Zoom Skype for Business Plugin: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') | no-fix |
| High | CVE-2023-36532 | Zoom Skype for Business Plugin: Buffer Overflow | no-fix |
| High | CVE-2023-36540 | Zoom Skype for Business Plugin: Untrusted Search Path | no-fix |
| High | CVE-2023-36541 | Zoom Skype for Business Plugin: Insufficient Verification of Data Authenticity | no-fix |
| High | CVE-2023-39203 | Zoom Skype for Business Plugin: Memory Allocation with Excessive Size Value | no-fix |
| High | CVE-2023-39204 | Zoom Skype for Business Plugin: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | no-fix |
| High | CVE-2023-39206 | Zoom Skype for Business Plugin: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | no-fix |
| High | CVE-2023-39211 | Zoom Skype for Business Plugin: Improper Verification of Cryptographic Signature | no-fix |
| High | CVE-2023-39214 | Zoom Skype for Business Plugin: Exposed Dangerous Method or Function | no-fix |
| High | CVE-2023-43582 | Zoom Skype for Business Plugin: Improper Authorization in Handler for Custom URL Scheme | no-fix |
| High | CVE-2023-43586 | Zoom Skype for Business Plugin: Untrusted Search Path | no-fix |
| High | CVE-2023-49647 | Zoom Desktop Client for Windows - Improper Access Control | no-fix |
| High | CVE-2024-24697 | Zoom Clients - Untrusted Search Path | no-fix |
| Routine | CVE-2023-28601 | Zoom Skype for Business Plugin: Improperly Implemented Security Check for Standard | no-fix |
| Routine | CVE-2023-34114 | Zoom Skype for Business Plugin: Exposure of Resource to Wrong Sphere | no-fix |
| Routine | CVE-2023-36535 | Zoom Skype for Business Plugin: The UI Performs the Wrong Action | no-fix |
| Routine | CVE-2023-39199 | Zoom Skype for Business Plugin: Missing Cryptographic Step | no-fix |
| Routine | CVE-2023-39205 | Zoom Skype for Business Plugin: Improper Check for Unusual or Exceptional Conditions | no-fix |
| Routine | CVE-2023-39209 | Zoom Skype for Business Plugin: The UI Performs the Wrong Action | no-fix |
| Routine | CVE-2023-39215 | Zoom Skype for Business Plugin: The UI Performs the Wrong Action | no-fix |
| Routine | CVE-2023-39218 | Zoom Skype for Business Plugin: Client-Side Enforcement of Server-Side Security | no-fix |
| Routine | CVE-2023-43588 | Zoom Skype for Business Plugin: The UI Performs the Wrong Action | no-fix |
| Routine | CVE-2023-49646 | Zoom Skype for Business Plugin: Improper Verification of Cryptographic Signature | no-fix |
| Routine | CVE-2024-24690 | Zoom Clients - Improper Input Validation | no-fix |
| Routine | CVE-2024-24695 | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation | no-fix |
| Routine | CVE-2024-24696 | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation | no-fix |
| Routine | CVE-2024-24698 | Zoom Clients - Improper Authentication | no-fix |
| Routine | CVE-2024-24699 | Zoom Clients - Business Logic Error | no-fix |
| Routine | CVE-2025-49462 | Zoom Clients - Cross-site Scripting | no-fix |
| Routine | CVE-2025-49464 | Zoom Clients for Windows- Classic Buffer Overflow | no-fix |
Security fixes, newest first
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.