Vendor
Zoom Communications
110 known vulnerabilities.
Zoom Communications at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 2 | 1 |
| Oct 2026 | 4 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 4 | 0 |
| Jul 2026 | 4 | 1 |
| Jun 2026 | 3 | 0 |
| May 2026 | 3 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 4 | 1 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 1 | 1 |
| Dec 2025 | 2 | 0 |
| Nov 2025 | 9 | 0 |
| Oct 2025 | 2 | 0 |
| Sep 2025 | 7 | 0 |
| Aug 2025 | 2 | 1 |
| Jul 2025 | 5 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 8 | 0 |
| Apr 2025 | 5 | 0 |
| Mar 2025 | 5 | 0 |
| Feb 2025 | 10 | 0 |
| Jan 2025 | 6 | 0 |
| Dec 2024 | 0 | 0 |
Products
Latest advisories
-
High max 8.3NCSC-2026-0293 4 CVEs
Kwetsbaarheden verholpen in Zoom
Zoom heeft kwetsbaarheden verholpen in Zoom Clients en Zoom VDI Client software.
-
Medium max 9.8NCSC-2026-0249 4 CVEs
Kwetsbaarheden verholpen in Zoom
Zoom heeft kwetsbaarheden verholpen in Zoom Client voor Windows, Zoom Rooms voor Windows en andere Zoom Windows-producten zoals de Windows Desktop Client, VDI Client en Meeting SDK.
-
High max 8.1NCSC-2025-0368 9 CVEs
Kwetsbaarheden verholpen in Zoom Workplace en Zoom Clients
Zoom heeft kwetsbaarheden verholpen in Zoom Workplace en Zoom Clients (Specifiek voor versies vóór 6.5.10).
-
High max 9.6NCSC-2025-0254 2 CVEs
Kwetsbaarheden verholpen in Zoom
Zoom heeft kwetsbaarheden verholpen in Zoom Clients voor Windows.
-
High max 7.4NCSC-2025-0228 5 CVEs
Kwetsbaarheden verholpen in Zoom Clients
Zoom heeft kwetsbaarheden verholpen in Zoom Clients (Specifiek voor versies voor Linux, Windows, iOS en macOS).
110 results · Feed
-
High 8.1
Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of pri…
-
Critical 9.6
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of p…
-
High 7.4
Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to co…
-
High 7.4
Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an inf…
-
High 8.0
Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escala…
-
High 8.1
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an…
-
High 7.1
Zoom VDI - Path Traversal
Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access.
-
High 8.3
Zoom Clients - Use After Free
Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access.
-
Medium 6.5
Zoom Clients - Buffer Over-read
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.
-
High 8.3CVE-2026-53413 Public exploit
Zoom Clients - Buffer Over-write
Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.
-
Critical 9.8
Zoom Workplace VDI Plugin for Windows - Improper Input Validation
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.
-
High 7.8
Zoom Workplace VDI Plugin for Windows - Improper Input Validation
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
-
High 7.0
Zoom Clients for Windows - Race Condition
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
-
High 7.8
Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct…
-
High 8.1
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7…
-
High 8.1
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7…
-
High 7.8
Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0…
-
High 7.8
Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user …
-
High 7.8
External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.1…
-
Low 1.8
Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct …
-
Critical 9.6
External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unaut…
-
High 7.8
Zoom Clients for Windows - Improper Privilege Management
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
-
High 7.0
Zoom Rooms for Windows - Improper Input Validation
Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.
-
High 7.8
Zoom Workplace Clients for Windows - Improper Check
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
-
Critical 9.9CVE-2026-22844 EPSS 13%
Zoom Node Deployments - Command Injection
A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access.
-
High 7.8
Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure
Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.
-
Medium 5.0
Zoom Rooms for macOS - External Control of File Name or Path
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.
-
High 8.1
Zoom Workplace Clients - Inefficient Regular Expression Complexity
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
-
Medium 5.3
Zoom Clients - Improper Removal of Sensitive Information
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
-
Medium 4.3
Zoom Workplace for Windows - Cross-site Scripting
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
-
Medium 6.6
Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following
Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.
-
Medium 4.8
Zoom Workplace Clients - Improper Certificate Validation
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
-
High 8.1
Zoom Workplace for Android - Improper Authorization Handling
Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
-
High 7.5
Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
-
Medium 4.3
Zoom Clients - External Control of File Name or Path
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
-
Medium 5.0
Zoom Workplace for macOS - External Control of File Name or Path
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
-
Medium 5.3
Zoom Rooms Clients - Authentication Bypass
Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.
-
Medium 4.1
Zoom Clients for Windows - Command Injection
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
-
Medium 6.6
Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race Condition
Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or before 6.2.15 and 6.3.12 in their respective tracks) may allow an authenticated user to conduct a disclosure of information via network acce…
-
Medium 5.3
Zoom Workplace Clients for Windows - Improper Action Enforcement
Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.