← Back

Workplace Virtual Desktop Infrastructure

workplace_virtual_desktop_infrastructure

Vendor: Zoom • 57 CVEs

CVEs (57)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Zoom
1Workplace Virtual Desktop Infrastructure
Jun 17, 2026
May 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local access.
1Zoom
2Workplace Desktop
Workplace Virtual Desktop Infrastructure
Jun 17, 2026
Mar 11, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.
1Zoom
3Rooms
Workplace DesktopWorkplace Virtual Desktop Infrastructure
Jun 17, 2026
Mar 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
1Zoom
3Meeting Software Development Kit
Workplace DesktopWorkplace Virtual Desktop Infrastructure
Jun 17, 2026
Mar 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
1Zoom
1Workplace Virtual Desktop Infrastructure
Jun 17, 2026
Nov 13, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
1Zoom
5Meeting Software Development Kit
RoomsRooms Controller+2 more
Jun 17, 2026
Nov 13, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
1Zoom
5Meeting Software Development Kit
RoomsRooms Controller+2 more
Jun 17, 2026
Nov 13, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
1Zoom
3Meeting Software Development Kit
Workplace DesktopWorkplace Virtual Desktop Infrastructure
Jun 17, 2026
Nov 13, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
1Zoom
1Workplace Virtual Desktop Infrastructure
Jun 17, 2026
Nov 13, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure...Show more
Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.Show less
1Zoom
4Meeting Software Development Kit
RoomsWorkplace Desktop+1 more
Jun 17, 2026
Oct 15, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
1Zoom
5Meeting Software Development Kit
RoomsRooms Controller+2 more
Jun 17, 2026
Sep 9, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.
1Zoom
5Meeting Software Development Kit
RoomsRooms Controller+2 more
Jun 17, 2026
Sep 9, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
Sep 9, 2025
N/A· v4
7.4 HIGH· v3
N/A· v2
Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
Sep 9, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
1Zoom
5Meeting Software Development Kit
RoomsRooms Controller+2 more
Jun 17, 2026
Sep 9, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access.
1Zoom
5Meeting Software Development Kit
RoomsRooms Controller+2 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access
1Zoom
5Meeting Software Development Kit
RoomsRooms Controller+2 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
5.1 MEDIUM· v3
N/A· v2
Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
May 14, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.
1Zoom
5Meeting Software Development Kit
RoomsRooms Controller+2 more
Jun 17, 2026
May 14, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
1Zoom
6Meeting Software Development Kit
RoomsRooms Controller+3 more
Jun 17, 2026
May 14, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.