Vulnerabilities (CVE)

Filtered by vendor Zoom Subscribe
Total 212 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-49462 1 Zoom 1 Zoom 2025-08-05 N/A 3.5 LOW
Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.
CVE-2025-49463 1 Zoom 1 Zoom 2025-08-05 N/A 6.5 MEDIUM
Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-49464 1 Zoom 1 Zoom 2025-08-05 N/A 6.5 MEDIUM
Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access.
CVE-2025-30665 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2025-08-05 N/A 6.5 MEDIUM
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2024-39827 1 Zoom 1 Workplace Desktop 2025-08-05 N/A 5.5 MEDIUM
Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.
CVE-2025-30666 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2025-08-05 N/A 6.5 MEDIUM
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-46788 1 Zoom 1 Workplace Desktop 2025-08-05 N/A 7.4 HIGH
Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access.
CVE-2024-27238 1 Zoom 3 Meeting Software Development Kit, Rooms, Workplace Desktop 2025-08-05 N/A 7.1 HIGH
Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access.
CVE-2024-27240 1 Zoom 3 Rooms, Workplace Desktop, Workplace Virtual Desktop Infrastructure 2025-08-05 N/A 7.1 HIGH
Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access.
CVE-2024-39820 1 Zoom 1 Workplace Desktop 2025-08-05 N/A 6.6 MEDIUM
Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.
CVE-2024-39821 1 Zoom 2 Rooms, Workplace Desktop 2025-08-05 N/A 6.6 MEDIUM
Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access.
CVE-2025-30671 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2025-08-01 N/A 6.5 MEDIUM
Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30670 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2025-08-01 N/A 6.5 MEDIUM
Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-27443 1 Zoom 4 Meeting Software Development Kit, Rooms, Rooms Controller and 1 more 2025-08-01 N/A 2.8 LOW
Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access.
CVE-2025-0150 1 Zoom 2 Meeting Software Development Kit, Workplace 2025-08-01 N/A 7.1 HIGH
Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-0146 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2025-08-01 N/A 3.9 LOW
Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access.
CVE-2025-0147 1 Zoom 3 Meeting Software Development Kit, Video Software Development Kit, Workplace Desktop 2025-08-01 N/A 8.8 HIGH
Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation of privilege via network access.
CVE-2024-27247 1 Zoom 1 Zoom 2025-07-31 N/A 5.5 MEDIUM
Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access.
CVE-2024-27242 1 Zoom 1 Zoom 2025-07-31 N/A 4.1 MEDIUM
Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access.
CVE-2024-24694 1 Zoom 1 Zoom 2025-07-31 N/A 5.9 MEDIUM
Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access.