← Back

Zoom

zoom

232 CVEs • 62 products

Products (62)

Click to collapse
Toggle
Rooms
rooms
Zoom
zoom
Workplace
workplace
Meetings
meetings
Hybrid Mmr
hybrid_mmr
Hybrid Zproxy
hybrid_zproxy
Vdi Citrix
vdi_citrix
Vdi Vmware
vdi_vmware
Meeting Sdk
meeting_sdk
It Installer
it_installer
Chat
chat
Screen Sharing
screen_sharing
Cleanzoom
cleanzoom
Remote Control
remote_control
Poly Ccx 700
poly_ccx_700
Poly Ccx 600
poly_ccx_600
Yealink Vp59
yealink_vp59
Yealink Mp54
yealink_mp54
Yealink Mp56
yealink_mp56

CVEs (232)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Zoom
2Meeting Software Development Kit
Workplace
Jun 17, 2026
Jun 12, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network acce...Show more
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.Show less
1Zoom
1Workplace
Jun 26, 2026
Jun 12, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network acce...Show more
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.Show less
1Zoom
1Remote Control
Jun 29, 2026
Jun 12, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.
1Zoom
1Rooms
Jun 17, 2026
May 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.
1Zoom
1Workplace Virtual Desktop Infrastructure
Jun 17, 2026
May 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local access.
1Zoom
1Workplace
Jun 17, 2026
May 13, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access.
1Zoom
2Workplace Desktop
Workplace Virtual Desktop Infrastructure
Jun 17, 2026
Mar 11, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.
1Zoom
3Rooms
Workplace DesktopWorkplace Virtual Desktop Infrastructure
Jun 17, 2026
Mar 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
1Zoom
1Rooms
Jun 17, 2026
Mar 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.
1Zoom
3Meeting Software Development Kit
Workplace DesktopWorkplace Virtual Desktop Infrastructure
Jun 17, 2026
Mar 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
1Zoom
1Rooms
Jun 17, 2026
Dec 10, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.
1Zoom
1Rooms
Jun 17, 2026
Dec 10, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.
1Zoom
2Meeting Software Development Kit
Workplace
Jun 17, 2026
Nov 13, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
1Zoom
2Meeting Software Development Kit
Workplace
Jun 17, 2026
Nov 13, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
1Zoom
1Workplace Virtual Desktop Infrastructure
Jun 17, 2026
Nov 13, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
1Zoom
5Meeting Software Development Kit
RoomsRooms Controller+2 more
Jun 17, 2026
Nov 13, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
1Zoom
2Meeting Software Development Kit
Workplace Desktop
Jun 17, 2026
Nov 13, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
1Zoom
5Meeting Software Development Kit
RoomsRooms Controller+2 more
Jun 17, 2026
Nov 13, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
1Zoom
2Meeting Software Development Kit
Workplace Desktop
Jun 17, 2026
Nov 13, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
1Zoom
3Meeting Software Development Kit
Workplace DesktopWorkplace Virtual Desktop Infrastructure
Jun 17, 2026
Nov 13, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.