Search Results (112 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-62482 2 Microsoft, Zoom 6 Windows, Meeting Software Development Kit, Workplace and 3 more 2026-01-13 4.3 Medium
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
CVE-2025-62483 1 Zoom 7 Meeting Software Development Kit, Rooms, Rooms Controller and 4 more 2026-01-13 5.3 Medium
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-64738 2 Apple, Zoom 6 Macos, Meeting Software Development Kit, Workplace and 3 more 2026-01-13 5 Medium
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
CVE-2025-64739 1 Zoom 7 Meeting Software Development Kit, Rooms, Rooms Controller and 4 more 2026-01-13 4.3 Medium
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-67461 2 Apple, Zoom 3 Macos, Rooms, Zoom 2025-12-30 5 Medium
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.
CVE-2025-58133 2 Microsoft, Zoom 3 Windows, Rooms, Zoom 2025-11-13 5.3 Medium
Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-49458 1 Zoom 8 Meeting Software Development Kit, Rooms, Rooms Controller and 5 more 2025-10-17 6.5 Medium
Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-49460 1 Zoom 8 Meeting Software Development Kit, Rooms, Rooms Controller and 5 more 2025-10-17 4.3 Medium
Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
CVE-2025-58135 2 Microsoft, Zoom 9 Windows, Meeting Software Development Kit, Rooms and 6 more 2025-10-06 5.3 Medium
Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-58134 2 Microsoft, Zoom 9 Windows, Meeting Software Development Kit, Rooms and 6 more 2025-10-06 4.3 Medium
Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access.
CVE-2025-49461 1 Zoom 8 Meeting Software Development Kit, Rooms, Rooms Controller and 5 more 2025-10-06 4.3 Medium
Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
CVE-2024-39819 1 Zoom 5 Meeting Software Development Kit, Rooms, Workplace Desktop and 2 more 2025-10-02 6.7 Medium
Integrity checkĀ in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access.
CVE-2025-49456 1 Zoom 7 Meeting Software Development Kit, Rooms, Rooms Controller and 4 more 2025-09-08 6.2 Medium
Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access.
CVE-2025-46789 1 Zoom 1 Zoom 2025-08-22 6.5 Medium
Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access.
CVE-2024-45419 1 Zoom 8 Meeting Software Development Kit, Rooms, Rooms Controller and 5 more 2025-08-19 8.1 High
Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-49462 1 Zoom 1 Zoom 2025-08-05 3.5 Low
Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.
CVE-2025-49463 1 Zoom 1 Zoom 2025-08-05 6.5 Medium
Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-49464 1 Zoom 1 Zoom 2025-08-05 6.5 Medium
Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access.
CVE-2024-27247 1 Zoom 2 Workplace Desktop, Zoom 2025-07-31 5.5 Medium
Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access.
CVE-2024-27242 1 Zoom 1 Zoom 2025-07-31 4.1 Medium
Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access.