Zoom Workplace Clients Cross-Site Scripting Vulnerability Allowing Denial-of-Service

A cross-site scripting vulnerability has been identified in certain Zoom Workplace Clients, including desktop applications for Windows, macOS, and Linux, as well as the iOS app, VDI client for Windows, and various Zoom Rooms and Meeting SDK clients. This vulnerability may allow an unauthenticated user to conduct a denial-of-service attack via network access.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition, causing disruptions in network access or application performance.

Remediation

Users are advised to update to the latest version of Zoom Workplace Clients. Instructions for downloading the latest version are available on the Zoom Download page.