https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-0998.htmlhttps://patchthecve.com/cve/CVE-2026-0998.htmlWed, 17 Jun 2026 10:11:44 +0000MEDIUM 4.3: Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate user identity and post ownership in the {{/api/v1/askPMI}} endpoint which allows unauthorized users to start Zoom meetings as any user and overwrite arbitrary posthttps://patchthecve.com/cve/CVE-2026-0997.htmlhttps://patchthecve.com/cve/CVE-2026-0997.htmlWed, 17 Jun 2026 10:11:44 +0000MEDIUM 4.3: Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate the authenticated user when processing {{/plugins/zoom/api/v1/channel-preference}}, which allows any logged-in user to change Zoom meeting restrictions for arbitrahttps://patchthecve.com/cve/CVE-2025-49464.htmlhttps://patchthecve.com/cve/CVE-2025-49464.htmlWed, 17 Jun 2026 09:31:21 +0000MEDIUM 6.5: Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access.https://patchthecve.com/cve/CVE-2025-49463.htmlhttps://patchthecve.com/cve/CVE-2025-49463.htmlWed, 17 Jun 2026 09:31:21 +0000MEDIUM 6.5: Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access.https://patchthecve.com/cve/CVE-2025-49462.htmlhttps://patchthecve.com/cve/CVE-2025-49462.htmlWed, 17 Jun 2026 09:31:21 +0000LOW 3.5: Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.https://patchthecve.com/cve/CVE-2025-46789.htmlhttps://patchthecve.com/cve/CVE-2025-46789.htmlWed, 17 Jun 2026 09:26:57 +0000MEDIUM 6.5: Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access.https://patchthecve.com/cve/CVE-2024-27247.htmlhttps://patchthecve.com/cve/CVE-2024-27247.htmlWed, 17 Jun 2026 07:19:31 +0000MEDIUM 5.5: Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access.https://patchthecve.com/cve/CVE-2024-27242.htmlhttps://patchthecve.com/cve/CVE-2024-27242.htmlWed, 17 Jun 2026 07:19:30 +0000MEDIUM 4.1: Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access.https://patchthecve.com/cve/CVE-2024-24694.htmlhttps://patchthecve.com/cve/CVE-2024-24694.htmlWed, 17 Jun 2026 07:14:41 +0000MEDIUM 5.9: Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access.