← Back

Workplace

workplace

Vendor: Zoom • 42 CVEs

CVEs (42)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Zoom
2Meeting Software Development Kit
Workplace
Jun 17, 2026
Jun 12, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network acce...Show more
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.Show less
1Zoom
1Workplace
Jun 26, 2026
Jun 12, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network acce...Show more
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.Show less
1Zoom
1Workplace
Jun 17, 2026
May 13, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access.
1Zoom
2Meeting Software Development Kit
Workplace
Jun 17, 2026
Nov 13, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
1Zoom
2Meeting Software Development Kit
Workplace
Jun 17, 2026
Nov 13, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
Sep 9, 2025
N/A· v4
7.4 HIGH· v3
N/A· v2
Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
Sep 9, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
May 14, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
May 14, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
May 14, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
May 14, 2025
N/A· v4
8.2 HIGH· v3
N/A· v2
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
May 14, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
Apr 8, 2025
N/A· v4
5.2 MEDIUM· v3
N/A· v2
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
Apr 8, 2025
N/A· v4
5.2 MEDIUM· v3
N/A· v2
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
Mar 11, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
Mar 11, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
Mar 11, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
1Zoom
2Meeting Software Development Kit
Workplace
Jun 17, 2026
Mar 11, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
Mar 11, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.
1Zoom
5Meeting Software Development Kit
RoomsWorkplace+2 more
Jun 17, 2026
Feb 25, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.