Zoom Communications, INC vulnerabilities
110 CVEs and advisories name Zoom Communications, INC as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-108187Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network…
- CVE-2026-108186Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via…
- CVE-2026-108185Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information
- CVE-2026-108184Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure v
- CVE-2026-53420Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via
- CVE-2026-53418Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user
- CVE-2026-53416Zoom VDI - Path Traversal
- CVE-2026-53415Zoom Clients - Use After Free
- CVE-2026-53414Zoom Clients - Buffer Over-read
- CVE-2026-53413Zoom Clients - Buffer Over-write
- CVE-2026-53412Zoom Workplace VDI Plugin for Windows - Improper Input Validation
- CVE-2026-53411Zoom Workplace VDI Plugin for Windows - Improper Input Validation
- CVE-2026-53410Zoom Clients for Windows - Race Condition
- CVE-2026-53409Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of pri
- CVE-2026-53408Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allo
- CVE-2026-53407Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allo
- CVE-2026-53406Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authe
- CVE-2026-30906Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalati
- CVE-2026-30905External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authen
- CVE-2026-30904Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of infor
- CVE-2026-30903External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to co
- CVE-2026-30902Zoom Clients for Windows - Improper Privilege Management
- CVE-2026-30901Zoom Rooms for Windows - Improper Input Validation
- CVE-2026-30900Zoom Workplace Clients for Windows - Improper Check
- CVE-2026-22844Zoom Node Deployments - Command Injection
- CVE-2025-67460Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure
- CVE-2025-67461Zoom Rooms for macOS - External Control of File Name or Path
- CVE-2025-62484Zoom Workplace Clients - Inefficient Regular Expression Complexity
- CVE-2025-62483Zoom Clients - Improper Removal of Sensitive Information
- CVE-2025-62482Zoom Workplace for Windows - Cross-site Scripting