🚀 NEW My notes, your AI note taker
Automatically captures, summarizes, and extracts action items from any virtual or in-person meeting. Learn more
Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
Zoom encrypts in-meeting chat messages using a per-meeting key and then transmits these encrypted messages between user devices and Zoom using TLS encryption. In the affected products, a copy of each in-meeting chat message was also sent encrypted only using TLS and not with the per-meeting key, including messages sent during End-to-End Encrypted (E2EE) meetings.
Users can help keep themselves secure by applying current updates or downloading the latest Zoom software with all current security updates from https://zoom.us/download, and avoid using the in-meeting chat while on the affected versions.
Reported by Zoom Offensive Security Team
| Revision | Date | Description |
|---|---|---|
| 1.0 | 06/29/2023 | Initial Publication |