Zoom Communications Inc.
38 CVEs across 17 Zoom Communications Inc. products. Browse Zoom Communications Inc. vulnerabilities, severities, and proof-of-concept exploits.
Zoom Communications Inc. products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-30902 | High | 7.8 | 2026-03-11 | Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access. |
CVE-2026-30901 | High | 7.0 | 2026-03-11 | Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local… |
CVE-2026-30900 | High | 7.8 | 2026-03-11 | Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privi… |
CVE-2026-22844 | Critical | 9.9 | 2026-01-20 | A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execu… |
CVE-2025-67461 | Medium | 5.0 | 2025-12-10 | External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via l… |
CVE-2025-67460 | High | 7.8 | 2025-12-10 | Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privile… |
CVE-2025-62484 | High | 8.1 | 2025-11-13 | Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of… |
CVE-2025-64741 | High | 8.1 | 2025-11-13 | Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via… |
CVE-2025-64740 | High | 7.5 | 2025-11-13 | Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escal… |
CVE-2025-64739 | Medium | 4.3 | 2025-11-13 | External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access. |
CVE-2025-64738 | Medium | 5.0 | 2025-11-13 | External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information… |
CVE-2025-62483 | Medium | 5.3 | 2025-11-13 | Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of informatio… |
CVE-2025-62482 | Medium | 4.3 | 2025-11-13 | Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access. |
CVE-2025-30669 | Medium | 4.8 | 2025-11-13 | Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access. |
CVE-2025-30662 | Medium | 6.6 | 2025-11-13 | Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tr… |
CVE-2025-58133 | Medium | 5.3 | 2025-10-15 | Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network acce… |
CVE-2025-58132 | Medium | 4.1 | 2025-10-15 | Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access. |
CVE-2025-49464 | Medium | 6.5 | 2025-07-10 | Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access. |
CVE-2025-49463 | Medium | 6.5 | 2025-07-10 | Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of informat… |
CVE-2025-49462 | Low | 3.5 | 2025-07-10 | Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access. |
CVE-2025-46789 | Medium | 6.5 | 2025-07-10 | Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access. |
CVE-2025-46788 | High | 7.4 | 2025-07-10 | Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via netwo… |
CVE-2024-45422 | Medium | 6.5 | 2024-11-19 | Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access. |
CVE-2024-45420 | Medium | 4.3 | 2024-11-19 | Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access. |
CVE-2024-45419 | High | 8.1 | 2024-11-19 | Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access. |
CVE-2024-42441 | Medium | 6.2 | 2024-08-14 | Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1… |
CVE-2024-42440 | Medium | 6.2 | 2024-08-14 | Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1… |
CVE-2024-42439 | Medium | 6.5 | 2024-08-14 | Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to cond… |
CVE-2024-42438 | Medium | 6.5 | 2024-08-14 | Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via netw… |
CVE-2024-42437 | Medium | 6.5 | 2024-08-14 | Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via netw… |
CVE-2024-42436 | Medium | 6.5 | 2024-08-14 | Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via netw… |
CVE-2024-42435 | Medium | 4.9 | 2024-08-14 | Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information… |
CVE-2024-42434 | Medium | 4.9 | 2024-08-14 | Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure… |
CVE-2024-39825 | High | 8.5 | 2024-08-14 | Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access. |
CVE-2024-39824 | Medium | 4.9 | 2024-08-14 | Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure… |
CVE-2024-39823 | Medium | 4.9 | 2024-08-14 | Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure… |
CVE-2024-39822 | Medium | 6.5 | 2024-08-14 | Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an informatio… |
CVE-2024-39818 | High | 7.5 | 2024-08-14 | Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access. |