Zoom Client for Windows vulnerabilities

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.