Skip to content
OpenAdvisories

Vendor

Zoom Communications

110 known vulnerabilities.

Products

Zoom Workplace Apps 15 Zoom Workplace 12 Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers 11 Zoom Clients 9 Zoom Rooms 6 Zoom Workplace Apps for Windows 6 Zoom Clients for Windows 5 Zoom Workplace Apps and SDKs 5 Zoom Workplace Clients 4 Zoom Apps for macOS 2 Zoom Workplace VDI Plugin 2 Zoom Workplace Clients for Windows 2 Zoom Jenkins Marketplace plugin 2 Zoom Apps 2 Zoom Apps and SDKs 2 Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS 2 Zoom Clients for iOS 1 Zoom Workplace Apps and Rooms Clients 1 Zoom Workplace Apps and SDK for Windows 1 Zoom Workplace VDI Plugin macOS Universal installer 1 Zoom Workplace Apps for iOS 1 Zoom Workplace Desktop App for macOS 1 Zoom Workplace for macOS 1 Zoom Workplace App for Windows and Zoom Rooms App for Windows 1 Zoom Workplace Desktop App for Windows 1 Zoom Workplace VDI Client 1 Zoom Workplace App for Linux 1 Zoom Workplace app for macOS 1 Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon 1 Zoom Node 1 Remote Control for Zoom Contact Center 1 Zoom VDI 1 Zoom Apps for Windows 1 Zoom Workplace for Windows 1 Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS 1 Zoom Workplace for Windows on ARM 1 Zoom Workplace Apps for Linux 1 Zoom Workplace for Android 1 Zoom Workplace for Linux 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-108186

    Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of p…

    Zoom Communications Zoom Workplace
  • Critical 9.8
    CVE-2026-53412

    Zoom Workplace VDI Plugin for Windows - Improper Input Validation

    Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

    Zoom Communications Zoom Workplace for Windows Windows
  • Critical 9.6
    CVE-2026-30903

    External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unaut…

    Zoom Communications Zoom Workplace
  • Critical 9.9
    CVE-2026-22844 EPSS 13%

    Zoom Node Deployments - Command Injection

    A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access.

    Zoom Communications Zoom Node
  • Critical 9.6
    CVE-2025-49457

    Zoom Clients for Windows - Untrusted Search Path

    Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access

    Zoom Communications Zoom Clients for Windows Windows