zoom Vulnerability Advisory Catalog

Total 231 security vulnerabilities recorded for zoom software and firmware.

← Back to All Vendors
Component: meeting_software_development_kit

Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network ac...

📅 2025-09-09
CVSS 4.3 Dossier →
Component: meeting_software_development_kit

Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access....

📅 2025-09-09
CVSS 4.3 Dossier →
Component: meeting_software_development_kit

Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network acces...

📅 2025-09-09
CVSS 4.3 Dossier →
Component: meeting_software_development_kit

Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access....

📅 2025-09-09
CVSS 6.5 Dossier →
CVE-2025-49457 CRITICAL
Component: meeting_software_development_kit

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

📅 2025-08-12
CVSS 9.6 Dossier →
Component: meeting_software_development_kit

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local acce...

📅 2025-08-12
CVSS 6.2 Dossier →
Component: zoom

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access....

📅 2025-07-10
CVSS 6.5 Dossier →
Component: zoom

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of...

📅 2025-07-10
CVSS 6.5 Dossier →
Component: zoom

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network ...

📅 2025-07-10
CVSS 3.5 Dossier →
Component: zoom

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access....

📅 2025-07-10
CVSS 6.5 Dossier →
Component: workplace_desktop

Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure ...

📅 2025-07-10
CVSS 7.4 Dossier →
Component: meeting_software_development_kit

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access....

📅 2025-05-14
CVSS 4.3 Dossier →
Component: meeting_software_development_kit

Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access....

📅 2025-05-14
CVSS 6.5 Dossier →
Component: meeting_software_development_kit

Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access....

📅 2025-05-14
CVSS 6.5 Dossier →
Component: meeting_software_development_kit

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access....

📅 2025-05-14
CVSS 6.5 Dossier →
Component: meeting_software_development_kit

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access....

📅 2025-05-14
CVSS 6.5 Dossier →
Component: meeting_software_development_kit

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access....

📅 2025-05-14
CVSS 6.5 Dossier →
Component: meeting_software_development_kit

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access....

📅 2025-05-14
CVSS 6.6 Dossier →
Component: meeting_software_development_kit

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local a...

📅 2025-05-14
CVSS 8.8 Dossier →
Component: meeting_software_development_kit

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access....

📅 2025-04-08
CVSS 6.5 Dossier →
Component: meeting_software_development_kit

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access....

📅 2025-04-08
CVSS 6.5 Dossier →
Component: meeting_software_development_kit

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via lo...

📅 2025-04-08
CVSS 2.8 Dossier →
Component: meeting_software_development_kit

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access....

📅 2025-04-08
CVSS 4.6 Dossier →
Component: meeting_software_development_kit

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access....

📅 2025-04-08
CVSS 4.6 Dossier →
Page 2 of 10 (231 Total Records)