File and Path Handling

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat message can cause an arb…CVE-2020-6109Zoom · CVSS 8.5 · 4.8% likely

   CWE-22

2. An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially crafted chat messag…CVE-2020-6110Zoom · CVSS 8 · 4.4% likely

   CWE-22

3. The Zoom IT installer for Windows (ZoomInstallerFull.msi) prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Stand…CVE-2020-11443Zoom · 1.5% likely

   CWE-59

4. A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was runn…CVE-2020-9767Zoom · 0.8% likely

   CWE-427

5. The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the installation or update…CVE-2021-34408Zoom · 0.6% likely

   CWE-59

6. Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (with the user's privil…CVE-2020-11469Zoom · CVSS 6.3 · 0.4% likely

   CWE-552

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.