CVE-2019-13449

In the Zoom Client before 4.4.2 on macOS, remote attackers can cause a denial of service (continual focus grabs) via a sequence of invalid launch?action=join&confno= requests to localhost port 19421.

• CWE-20

• https://assets.zoom.us/docs/pdf/Zoom+Response+Video-On+Vulnerability.pdfVendor Advisory
• https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/Vendor Advisory
• https://bugs.chromium.org/p/chromium/issues/detail?id=951540Exploit, Third Party Advisory
• https://medium.com/%40jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5
• https://twitter.com/zoom_us/status/1148710712241295361Third Party Advisory
• https://assets.zoom.us/docs/pdf/Zoom+Response+Video-On+Vulnerability.pdfVendor Advisory
• https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/Vendor Advisory
• https://bugs.chromium.org/p/chromium/issues/detail?id=951540Exploit, Third Party Advisory
• https://medium.com/%40jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5
• https://twitter.com/zoom_us/status/1148710712241295361Third Party Advisory

Published

Jul 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1343A denial of service vulnerability exists when Windows improp…6.5
• CVE-2019-1344An information disclosure vulnerability exists in the way th…5.5
• CVE-2019-13445An issue was discovered in the ROS communications-related pa…9.8
• CVE-2019-13446Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-13447An issue was discovered in Sertek Xpare 3.67. The login form…
• CVE-2019-13448An issue was discovered in Sertek Xpare 3.67. The login form…
• CVE-2019-1345An information disclosure vulnerability exists when the Wind…5.5
• CVE-2019-13450In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.…
• CVE-2019-13451In Xymon through 4.3.28, a buffer overflow vulnerability exi…
• CVE-2019-13452In Xymon through 4.3.28, a buffer overflow vulnerability exi…
• CVE-2019-13453Zipios before 0.1.7 does not properly handle certain malform…
• CVE-2019-13454ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero …6.5