zoom Vulnerability Advisory Catalog

Total 231 security vulnerabilities recorded for zoom software and firmware.

← Back to All Vendors
Component: meeting_software_development_kit

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unaut...

📅 2026-06-12
CVSS 8.1 Dossier →
Component: workplace

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unaut...

📅 2026-06-12
CVSS 8.1 Dossier →
Component: remote_control

Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated u...

📅 2026-06-12
CVSS 7.8 Dossier →
Component: rooms

Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of priv...

📅 2026-05-13
CVSS 7.8 Dossier →
Component: workplace_virtual_desktop_infrastructure

External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated us...

📅 2026-05-13
CVSS 7.8 Dossier →
Component: workplace

Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via...

📅 2026-05-13
CVSS 1.8 Dossier →
CVE-2026-30903 CRITICAL
Component: workplace_desktop

External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an e...

📅 2026-03-11
CVSS 9.6 Dossier →
Component: rooms

Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local acce...

📅 2026-03-11
CVSS 7.8 Dossier →
Component: rooms

Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege v...

📅 2026-03-11
CVSS 7.0 Dossier →
Component: meeting_software_development_kit

Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation...

📅 2026-03-11
CVSS 7.8 Dossier →
Component: rooms

External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of informat...

📅 2025-12-10
CVSS 5.0 Dossier →
Component: rooms

Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation o...

📅 2025-12-10
CVSS 7.8 Dossier →
Component: meeting_software_development_kit

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an esca...

📅 2025-11-13
CVSS 8.1 Dossier →
Component: meeting_software_development_kit

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of priv...

📅 2025-11-13
CVSS 8.1 Dossier →
Component: workplace_virtual_desktop_infrastructure

Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct...

📅 2025-11-13
CVSS 7.5 Dossier →
Component: meeting_software_development_kit

External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network acc...

📅 2025-11-13
CVSS 4.3 Dossier →
Component: meeting_software_development_kit

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of inf...

📅 2025-11-13
CVSS 5.0 Dossier →
Component: meeting_software_development_kit

Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of i...

📅 2025-11-13
CVSS 5.3 Dossier →
Component: meeting_software_development_kit

Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access....

📅 2025-11-13
CVSS 4.3 Dossier →
Component: meeting_software_development_kit

Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access....

📅 2025-11-13
CVSS 4.8 Dossier →
Component: workplace_virtual_desktop_infrastructure

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their resp...

📅 2025-11-13
CVSS 6.6 Dossier →
Component: rooms

Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via net...

📅 2025-10-15
CVSS 5.3 Dossier →
Component: meeting_software_development_kit

Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access....

📅 2025-10-15
CVSS 4.1 Dossier →
Component: meeting_software_development_kit

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via...

📅 2025-09-09
CVSS 5.3 Dossier →
Page 1 of 10 (231 Total Records)