Zoom

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-30662 1Zoom 1Workplace Virtual Desktop Infrastructure Jun 17, 2026 Nov 13, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure...Show more Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.Show less
CVE-2025-58133 1Zoom 1Rooms Jun 17, 2026 Oct 15, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-58132 1Zoom 4Meeting Software Development Kit RoomsWorkplace Desktop+1 more Jun 17, 2026 Oct 15, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
CVE-2025-58135 1Zoom 5Meeting Software Development Kit RoomsRooms Controller+2 more Jun 17, 2026 Sep 9, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-58134 1Zoom 5Meeting Software Development Kit RoomsRooms Controller+2 more Jun 17, 2026 Sep 9, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access.
CVE-2025-49461 1Zoom 6Meeting Software Development Kit RoomsRooms Controller+3 more Jun 17, 2026 Sep 9, 2025 N/A· v4 7.4 HIGH· v3 N/A· v2 Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
CVE-2025-49460 1Zoom 6Meeting Software Development Kit RoomsRooms Controller+3 more Jun 17, 2026 Sep 9, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
CVE-2025-49458 1Zoom 5Meeting Software Development Kit RoomsRooms Controller+2 more Jun 17, 2026 Sep 9, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-49457 1Zoom 5Meeting Software Development Kit RoomsRooms Controller+2 more Jun 17, 2026 Aug 12, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access
CVE-2025-49456 1Zoom 5Meeting Software Development Kit RoomsRooms Controller+2 more Jun 17, 2026 Aug 12, 2025 N/A· v4 5.1 MEDIUM· v3 N/A· v2 Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access.
CVE-2025-49464 1Zoom 1Zoom Jun 17, 2026 Jul 10, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access.
CVE-2025-49463 1Zoom 1Zoom Jun 17, 2026 Jul 10, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-49462 1Zoom 1Zoom Jun 17, 2026 Jul 10, 2025 N/A· v4 3.5 LOW· v3 N/A· v2 Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.
CVE-2025-46789 1Zoom 1Zoom Jun 17, 2026 Jul 10, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access.
CVE-2025-46788 1Zoom 1Workplace Desktop Jun 17, 2026 Jul 10, 2025 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access.
CVE-2025-46786 1Zoom 6Meeting Software Development Kit RoomsRooms Controller+3 more Jun 17, 2026 May 14, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.
CVE-2025-46785 1Zoom 5Meeting Software Development Kit RoomsRooms Controller+2 more Jun 17, 2026 May 14, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30668 1Zoom 6Meeting Software Development Kit RoomsRooms Controller+3 more Jun 17, 2026 May 14, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30667 1Zoom 6Meeting Software Development Kit RoomsRooms Controller+3 more Jun 17, 2026 May 14, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30666 1Zoom 5Meeting Software Development Kit RoomsRooms Controller+2 more Jun 17, 2026 May 14, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

Previous 123 4 5...12 Next