https://vulnogram.org/ Most recent CVEs assigned by Zoom Communications, Inc. (zoom). https://vulnogram.org/seaview/icons/zoom.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-108185 https://vulnogram.org/CVE-2026-108185 Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access. High Network Exploitable Tue, 13 Oct 2026 14:29:48 GMT https://vulnogram.org/CVE-2026-108184 https://vulnogram.org/CVE-2026-108184 Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access. High Network Exploitable Tue, 13 Oct 2026 14:28:33 GMT https://vulnogram.org/CVE-2026-53420 https://vulnogram.org/CVE-2026-53420 Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access. High Tue, 13 Oct 2026 14:22:00 GMT https://vulnogram.org/CVE-2026-53418 https://vulnogram.org/CVE-2026-53418 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access. High Tue, 13 Oct 2026 14:15:39 GMT https://vulnogram.org/CVE-2026-53416 https://vulnogram.org/CVE-2026-53416 Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access. High Tue, 11 Aug 2026 16:02:28 GMT https://vulnogram.org/CVE-2026-53415 https://vulnogram.org/CVE-2026-53415 Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access. High Network Exploitable Tue, 11 Aug 2026 15:59:21 GMT https://vulnogram.org/CVE-2026-53414 https://vulnogram.org/CVE-2026-53414 Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access. Medium Network Exploitable Tue, 11 Aug 2026 15:58:11 GMT https://vulnogram.org/CVE-2026-53413 https://vulnogram.org/CVE-2026-53413 Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access. High Network Exploitable Tue, 11 Aug 2026 15:55:38 GMT https://vulnogram.org/CVE-2026-53412 https://vulnogram.org/CVE-2026-53412 Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access. Critical Network Exploitable Thu, 16 Jul 2026 21:15:25 GMT https://vulnogram.org/CVE-2026-53411 https://vulnogram.org/CVE-2026-53411 A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges. High Thu, 16 Jul 2026 21:13:33 GMT https://vulnogram.org/CVE-2026-53410 https://vulnogram.org/CVE-2026-53410 A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges. High Thu, 16 Jul 2026 21:11:44 GMT https://vulnogram.org/CVE-2026-53409 https://vulnogram.org/CVE-2026-53409 Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access. High Thu, 16 Jul 2026 21:08:12 GMT https://vulnogram.org/CVE-2026-53408 https://vulnogram.org/CVE-2026-53408 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access. High Fri, 12 Jun 2026 17:57:01 GMT https://vulnogram.org/CVE-2026-53407 https://vulnogram.org/CVE-2026-53407 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access. High Fri, 12 Jun 2026 17:56:26 GMT https://vulnogram.org/CVE-2026-53406 https://vulnogram.org/CVE-2026-53406 Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access. High Fri, 12 Jun 2026 17:52:45 GMT https://vulnogram.org/CVE-2026-30906 https://vulnogram.org/CVE-2026-30906 Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access. High Wed, 13 May 2026 18:03:12 GMT https://vulnogram.org/CVE-2026-30905 https://vulnogram.org/CVE-2026-30905 External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local access. High Wed, 13 May 2026 18:00:22 GMT https://vulnogram.org/CVE-2026-30904 https://vulnogram.org/CVE-2026-30904 Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access. Low Wed, 13 May 2026 17:53:13 GMT https://vulnogram.org/CVE-2026-30903 https://vulnogram.org/CVE-2026-30903 External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access. Critical Network Exploitable Wed, 11 Mar 2026 14:52:55 GMT https://vulnogram.org/CVE-2026-30902 https://vulnogram.org/CVE-2026-30902 Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access. High Wed, 11 Mar 2026 14:50:51 GMT https://vulnogram.org/CVE-2026-30901 https://vulnogram.org/CVE-2026-30901 Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access. High Wed, 11 Mar 2026 14:47:42 GMT https://vulnogram.org/CVE-2026-30900 https://vulnogram.org/CVE-2026-30900 Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access. High Wed, 11 Mar 2026 14:44:36 GMT https://vulnogram.org/CVE-2026-22844 https://vulnogram.org/CVE-2026-22844 A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access. Critical Tue, 20 Jan 2026 13:57:44 GMT https://vulnogram.org/CVE-2025-67460 https://vulnogram.org/CVE-2025-67460 Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access. High Wed, 10 Dec 2025 20:37:03 GMT https://vulnogram.org/CVE-2025-67461 https://vulnogram.org/CVE-2025-67461 External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access. Medium Wed, 10 Dec 2025 20:29:36 GMT https://vulnogram.org/CVE-2025-62484 https://vulnogram.org/CVE-2025-62484 Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access. High Network Exploitable Thu, 13 Nov 2025 15:07:57 GMT https://vulnogram.org/CVE-2025-62483 https://vulnogram.org/CVE-2025-62483 Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access. Medium Network Exploitable Thu, 13 Nov 2025 15:03:07 GMT https://vulnogram.org/CVE-2025-62482 https://vulnogram.org/CVE-2025-62482 Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access. Medium Network Exploitable Thu, 13 Nov 2025 14:56:25 GMT https://vulnogram.org/CVE-2025-30662 https://vulnogram.org/CVE-2025-30662 Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network acc… Medium Thu, 13 Nov 2025 14:53:09 GMT https://vulnogram.org/CVE-2025-30669 https://vulnogram.org/CVE-2025-30669 Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access. Medium Thu, 13 Nov 2025 14:49:54 GMT https://vulnogram.org/CVE-2025-64741 https://vulnogram.org/CVE-2025-64741 Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access. High Network Exploitable Thu, 13 Nov 2025 14:46:59 GMT https://vulnogram.org/CVE-2025-64740 https://vulnogram.org/CVE-2025-64740 Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access. High Thu, 13 Nov 2025 14:35:39 GMT https://vulnogram.org/CVE-2025-64739 https://vulnogram.org/CVE-2025-64739 External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access. Medium Network Exploitable Thu, 13 Nov 2025 14:28:58 GMT https://vulnogram.org/CVE-2025-64738 https://vulnogram.org/CVE-2025-64738 External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access. Medium Thu, 13 Nov 2025 14:23:00 GMT https://vulnogram.org/CVE-2025-58133 https://vulnogram.org/CVE-2025-58133 Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access. Medium Network Exploitable Wed, 15 Oct 2025 16:13:28 GMT https://vulnogram.org/CVE-2025-58132 https://vulnogram.org/CVE-2025-58132 Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access. Medium Wed, 15 Oct 2025 16:10:20 GMT https://vulnogram.org/CVE-2025-58131 https://vulnogram.org/CVE-2025-58131 Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or before 6.2.15 and 6.3.12 in their respective tracks) may allow an authenticated user to conduct a disclosure of information via net… Medium Tue, 09 Sep 2025 21:48:51 GMT https://vulnogram.org/CVE-2025-58135 https://vulnogram.org/CVE-2025-58135 Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access. Medium Network Exploitable Tue, 09 Sep 2025 21:45:52 GMT https://vulnogram.org/CVE-2025-58134 https://vulnogram.org/CVE-2025-58134 Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access. Medium Network Exploitable Tue, 09 Sep 2025 21:44:01 GMT https://vulnogram.org/CVE-2025-49461 https://vulnogram.org/CVE-2025-49461 Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. Medium Network Exploitable Tue, 09 Sep 2025 21:42:05 GMT https://vulnogram.org/CVE-2025-49460 https://vulnogram.org/CVE-2025-49460 Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. Medium Network Exploitable Tue, 09 Sep 2025 21:38:40 GMT https://vulnogram.org/CVE-2025-49459 https://vulnogram.org/CVE-2025-49459 Missing authorization in the installer for Zoom Workplace for Windows on ARM before version 6.5.0 may allow an authenticated user to conduct an escalation of privilege via local access. High Tue, 09 Sep 2025 21:29:33 GMT https://vulnogram.org/CVE-2025-49458 https://vulnogram.org/CVE-2025-49458 Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access. Medium Tue, 09 Sep 2025 21:25:52 GMT https://vulnogram.org/CVE-2025-49457 https://vulnogram.org/CVE-2025-49457 Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access Critical Network Exploitable Tue, 12 Aug 2025 22:54:20 GMT https://vulnogram.org/CVE-2025-49456 https://vulnogram.org/CVE-2025-49456 Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access. Medium Tue, 12 Aug 2025 22:52:22 GMT https://vulnogram.org/CVE-2025-49464 https://vulnogram.org/CVE-2025-49464 Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access. Medium Thu, 10 Jul 2025 16:32:20 GMT https://vulnogram.org/CVE-2025-49463 https://vulnogram.org/CVE-2025-49463 Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access. Medium Network Exploitable Thu, 10 Jul 2025 16:26:46 GMT https://vulnogram.org/CVE-2025-49462 https://vulnogram.org/CVE-2025-49462 Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access. Low Thu, 10 Jul 2025 16:24:14 GMT https://vulnogram.org/CVE-2025-46789 https://vulnogram.org/CVE-2025-46789 Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access. Medium Thu, 10 Jul 2025 15:50:54 GMT https://vulnogram.org/CVE-2025-46788 https://vulnogram.org/CVE-2025-46788 Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access. High Network Exploitable Thu, 10 Jul 2025 15:48:04 GMT