# cve.now: Zoom Communications, INC

The newest entries naming Zoom Communications, INC as an affected vendor (up to 200), of 110 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-108187](https://cve.now/CVE-2026-108187.md): Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network… (CVSS 8.1)
- [CVE-2026-108186](https://cve.now/CVE-2026-108186.md): Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via… (CVSS 9.6)
- [CVE-2026-108185](https://cve.now/CVE-2026-108185.md): Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information (CVSS 7.4)
- [CVE-2026-108184](https://cve.now/CVE-2026-108184.md): Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure v (CVSS 7.4)
- [CVE-2026-53420](https://cve.now/CVE-2026-53420.md): Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via (CVSS 8.0)
- [CVE-2026-53418](https://cve.now/CVE-2026-53418.md): Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user (CVSS 8.1)
- [CVE-2026-53416](https://cve.now/CVE-2026-53416.md): Zoom VDI - Path Traversal (CVSS 7.1)
- [CVE-2026-53415](https://cve.now/CVE-2026-53415.md): Zoom Clients - Use After Free (CVSS 8.3)
- [CVE-2026-53414](https://cve.now/CVE-2026-53414.md): Zoom Clients - Buffer Over-read (CVSS 6.5)
- [CVE-2026-53413](https://cve.now/CVE-2026-53413.md): Zoom Clients - Buffer Over-write (CVSS 8.3)
- [CVE-2026-53412](https://cve.now/CVE-2026-53412.md): Zoom Workplace VDI Plugin for Windows - Improper Input Validation (CVSS 9.8)
- [CVE-2026-53411](https://cve.now/CVE-2026-53411.md): Zoom Workplace VDI Plugin for Windows - Improper Input Validation (CVSS 7.8)
- [CVE-2026-53410](https://cve.now/CVE-2026-53410.md): Zoom Clients for Windows - Race Condition (CVSS 7.0)
- [CVE-2026-53409](https://cve.now/CVE-2026-53409.md): Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of pri (CVSS 7.8)
- [CVE-2026-53408](https://cve.now/CVE-2026-53408.md): Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allo (CVSS 8.1)
- [CVE-2026-53407](https://cve.now/CVE-2026-53407.md): Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allo (CVSS 8.1)
- [CVE-2026-53406](https://cve.now/CVE-2026-53406.md): Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authe (CVSS 7.8)
- [CVE-2026-30906](https://cve.now/CVE-2026-30906.md): Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalati (CVSS 7.8)
- [CVE-2026-30905](https://cve.now/CVE-2026-30905.md): External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authen (CVSS 7.8)
- [CVE-2026-30904](https://cve.now/CVE-2026-30904.md): Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of infor (CVSS 1.8)
- [CVE-2026-30903](https://cve.now/CVE-2026-30903.md): External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to co (CVSS 9.6)
- [CVE-2026-30902](https://cve.now/CVE-2026-30902.md): Zoom Clients for Windows - Improper Privilege Management (CVSS 7.8)
- [CVE-2026-30901](https://cve.now/CVE-2026-30901.md): Zoom Rooms for Windows - Improper Input Validation (CVSS 7.0)
- [CVE-2026-30900](https://cve.now/CVE-2026-30900.md): Zoom Workplace Clients for Windows - Improper Check (CVSS 7.8)
- [CVE-2026-22844](https://cve.now/CVE-2026-22844.md): Zoom Node Deployments - Command Injection (CVSS 9.9)
- [CVE-2025-67460](https://cve.now/CVE-2025-67460.md): Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure (CVSS 7.8)
- [CVE-2025-67461](https://cve.now/CVE-2025-67461.md): Zoom Rooms for macOS - External Control of File Name or Path (CVSS 5.0)
- [CVE-2025-62484](https://cve.now/CVE-2025-62484.md): Zoom Workplace Clients - Inefficient Regular Expression Complexity (CVSS 8.1)
- [CVE-2025-62483](https://cve.now/CVE-2025-62483.md): Zoom Clients - Improper Removal of Sensitive Information (CVSS 5.3)
- [CVE-2025-62482](https://cve.now/CVE-2025-62482.md): Zoom Workplace for Windows - Cross-site Scripting (CVSS 4.3)
- [CVE-2025-30662](https://cve.now/CVE-2025-30662.md): Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following (CVSS 6.6)
- [CVE-2025-30669](https://cve.now/CVE-2025-30669.md): Zoom Workplace Clients - Improper Certificate Validation (CVSS 4.8)
- [CVE-2025-64741](https://cve.now/CVE-2025-64741.md): Zoom Workplace for Android - Improper Authorization Handling (CVSS 8.1)
- [CVE-2025-64740](https://cve.now/CVE-2025-64740.md): Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature (CVSS 7.5)
- [CVE-2025-64739](https://cve.now/CVE-2025-64739.md): Zoom Clients - External Control of File Name or Path (CVSS 4.3)
- [CVE-2025-64738](https://cve.now/CVE-2025-64738.md): Zoom Workplace for macOS - External Control of File Name or Path (CVSS 5.0)
- [CVE-2025-58133](https://cve.now/CVE-2025-58133.md): Zoom Rooms Clients - Authentication Bypass (CVSS 5.3)
- [CVE-2025-58132](https://cve.now/CVE-2025-58132.md): Zoom Clients for Windows - Command Injection (CVSS 4.1)
- [CVE-2025-58131](https://cve.now/CVE-2025-58131.md): Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race Condition (CVSS 6.6)
- [CVE-2025-58135](https://cve.now/CVE-2025-58135.md): Zoom Workplace Clients for Windows - Improper Action Enforcement (CVSS 5.3)
- [CVE-2025-58134](https://cve.now/CVE-2025-58134.md): Zoom Workplace Clients for Windows - Incorrect Authorization (CVSS 4.3)
- [CVE-2025-49461](https://cve.now/CVE-2025-49461.md): Zoom Workplace Clients - Cross-site Scripting (CVSS 4.3)
- [CVE-2025-49460](https://cve.now/CVE-2025-49460.md): Zoom Workplace Clients - Argument Injection (CVSS 4.3)
- [CVE-2025-49459](https://cve.now/CVE-2025-49459.md): Zoom Workplace for Windows on ARM - Missing Authorization (CVSS 7.8)
- [CVE-2025-49458](https://cve.now/CVE-2025-49458.md): Zoom Workplace Clients - Buffer Overflow (CVSS 6.5)
- [CVE-2025-49457](https://cve.now/CVE-2025-49457.md): Zoom Clients for Windows - Untrusted Search Path (CVSS 9.6)
- [CVE-2025-49456](https://cve.now/CVE-2025-49456.md): Zoom Clients for Windows- Race Condition (CVSS 6.2)
- [CVE-2025-49464](https://cve.now/CVE-2025-49464.md): Zoom Clients for Windows- Classic Buffer Overflow (CVSS 6.5)
- [CVE-2025-49463](https://cve.now/CVE-2025-49463.md): Zoom Clients for iOS - Insufficient Control Flow Management (CVSS 6.5)
- [CVE-2025-49462](https://cve.now/CVE-2025-49462.md): Zoom Clients - Cross-site Scripting (CVSS 3.5)
- [CVE-2025-46789](https://cve.now/CVE-2025-46789.md): Zoom Clients for Windows - Classic Buffer Overflow (CVSS 6.5)
- [CVE-2025-46788](https://cve.now/CVE-2025-46788.md): Zoom Workplace for Linux - Improper Certificate Validation (CVSS 7.4)
- [CVE-2025-46786](https://cve.now/CVE-2025-46786.md): Zoom Workplace Apps - Cross-site Scripting (CVSS 4.3)
- [CVE-2025-46785](https://cve.now/CVE-2025-46785.md): Zoom Workplace Apps for Windows - Buffer Over-read (CVSS 6.5)
- [CVE-2025-30668](https://cve.now/CVE-2025-30668.md): Zoom Workplace Apps - NULL Pointer Dereference (CVSS 6.5)
- [CVE-2025-30667](https://cve.now/CVE-2025-30667.md): Zoom Workplace Apps - NULL Pointer Dereference (CVSS 6.5)
- [CVE-2025-30666](https://cve.now/CVE-2025-30666.md): Zoom Workplace Apps for Windows - NULL Pointer Dereference (CVSS 6.5)
- [CVE-2025-30665](https://cve.now/CVE-2025-30665.md): Zoom Workplace Apps for Windows - NULL Pointer Dereference (CVSS 6.5)
- [CVE-2025-30664](https://cve.now/CVE-2025-30664.md): Zoom Workplace Apps - Cross-site Scripting (CVSS 6.6)
- [CVE-2025-30663](https://cve.now/CVE-2025-30663.md): Zoom Workplace Apps - Time-of-check Time-of-use (CVSS 8.8)
- [CVE-2025-30671](https://cve.now/CVE-2025-30671.md): Zoom Workplace Apps for Windows - Null Pointer (CVSS 6.5)
- [CVE-2025-30670](https://cve.now/CVE-2025-30670.md): Zoom Workplace Apps for Windows - Null Pointer (CVSS 6.5)
- [CVE-2025-27443](https://cve.now/CVE-2025-27443.md): Zoom Workplace Apps for Windows - Insecure Default Variable Initialization (CVSS 2.8)
- [CVE-2025-27442](https://cve.now/CVE-2025-27442.md): Zoom Workplace Apps - Cross Site Scripting (CVSS 4.6)
- [CVE-2025-27441](https://cve.now/CVE-2025-27441.md): Zoom Workplace Apps - Cross Site Scripting (CVSS 4.6)
- [CVE-2025-27440](https://cve.now/CVE-2025-27440.md): Zoom Apps - Heap-based Buffer Overflow (CVSS 8.5)
- [CVE-2025-27439](https://cve.now/CVE-2025-27439.md): Zoom Apps - Buffer Underflow (CVSS 8.5)
- [CVE-2025-0151](https://cve.now/CVE-2025-0151.md): Zoom Apps - Use After Free (CVSS 8.5)
- [CVE-2025-0150](https://cve.now/CVE-2025-0150.md): Zoom Workplace Apps for iOS - Incorrect Behavior Order (CVSS 7.1)
- [CVE-2025-0149](https://cve.now/CVE-2025-0149.md): Zoom Apps - Insufficient Verification of Data Authenticity (CVSS 6.5)
- [CVE-2024-27239](https://cve.now/CVE-2024-27239.md): Zoom Workplace Apps and SDKs - Divide By Zero (CVSS 4.3)
- [CVE-2024-27246](https://cve.now/CVE-2024-27246.md): Zoom Workplace Apps and SDKs - Use After Free (CVSS 4.3)
- [CVE-2024-27245](https://cve.now/CVE-2024-27245.md): Zoom Workplace Apps and SDKs - Buffer Overflow (CVSS 4.3)
- [CVE-2024-45421](https://cve.now/CVE-2024-45421.md): Zoom Apps - Buffer Overflow (CVSS 8.5)
- [CVE-2024-45418](https://cve.now/CVE-2024-45418.md): Zoom Apps for macOS - Symbolic Link Following (CVSS 5.4)
- [CVE-2024-45417](https://cve.now/CVE-2024-45417.md): Zoom Apps for macOS - Uncontrolled Resource Consumption (CVSS 6.0)
- [CVE-2024-45426](https://cve.now/CVE-2024-45426.md): Zoom Workplace Apps - Incorrect Ownership Assignment (CVSS 4.9)
- [CVE-2024-45425](https://cve.now/CVE-2024-45425.md): Zoom Workplace Apps - Incorrect User Management (CVSS 4.9)
- [CVE-2024-45424](https://cve.now/CVE-2024-45424.md): Zoom Workplace Apps - Business Logic Error (CVSS 5.3)
- [CVE-2025-0148](https://cve.now/CVE-2025-0148.md): Zoom Jenkins Marketplace plugin - Missing Password Field Masking (CVSS 2.6)
- [CVE-2025-0147](https://cve.now/CVE-2025-0147.md): Zoom Workplace App for Linux - Type Confusion (CVSS 8.8)
- [CVE-2025-0146](https://cve.now/CVE-2025-0146.md): Zoom Workplace app for macOS - Symlink Following (CVSS 3.9)
- [CVE-2025-0145](https://cve.now/CVE-2025-0145.md): Zoom Workplace Apps for Windows - Untrusted Search Path (CVSS 4.6)
- [CVE-2025-0144](https://cve.now/CVE-2025-0144.md): Zoom Workplace Apps - Out-of-bounds Write (CVSS 3.1)
- [CVE-2025-0143](https://cve.now/CVE-2025-0143.md): Zoom Workplace Apps for Linux - Out-of-bounds Write (CVSS 4.3)
- [CVE-2025-0142](https://cve.now/CVE-2025-0142.md): Zoom Jenkins Marketplace plugin - Cleartext Storage of Sensitive Information (CVSS 4.3)
- [CVE-2024-45422](https://cve.now/CVE-2024-45422.md): Zoom Apps - Improper Input Validation (CVSS 6.5)
- [CVE-2024-45420](https://cve.now/CVE-2024-45420.md): Zoom Apps - Uncontrolled Resource Consumption (CVSS 4.3)
- [CVE-2024-45419](https://cve.now/CVE-2024-45419.md): Zoom Apps - Improper Input Validation (CVSS 8.1)
- [CVE-2024-42441](https://cve.now/CVE-2024-42441.md): Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Incorrect Privilege Assignment (CVSS 6.2)
- [CVE-2024-42440](https://cve.now/CVE-2024-42440.md): Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Improper Privilege Management (CVSS 6.2)
- [CVE-2024-42439](https://cve.now/CVE-2024-42439.md): Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search Path (CVSS 6.5)
- [CVE-2024-42438](https://cve.now/CVE-2024-42438.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow (CVSS 6.5)
- [CVE-2024-42437](https://cve.now/CVE-2024-42437.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow (CVSS 6.5)
- [CVE-2024-42436](https://cve.now/CVE-2024-42436.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow (CVSS 6.5)
- [CVE-2024-42435](https://cve.now/CVE-2024-42435.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure (CVSS 4.9)
- [CVE-2024-42434](https://cve.now/CVE-2024-42434.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization (CVSS 4.9)
- [CVE-2024-39824](https://cve.now/CVE-2024-39824.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization (CVSS 4.9)
- [CVE-2024-39823](https://cve.now/CVE-2024-39823.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization (CVSS 4.9)
- [CVE-2024-39822](https://cve.now/CVE-2024-39822.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure (CVSS 6.5)
- [CVE-2024-39818](https://cve.now/CVE-2024-39818.md): Zoom Workplace Apps and SDKs - Protection Mechanism Failure (CVSS 7.5)
- [CVE-2024-39825](https://cve.now/CVE-2024-39825.md): Zoom Workplace Apps and Rooms Clients - Buffer Overflow (CVSS 8.5)
- [CVE-2024-39821](https://cve.now/CVE-2024-39821.md): Zoom Workplace App for Windows and Zoom Rooms App for Windows - Race Condition (CVSS 6.6)
- [CVE-2024-39820](https://cve.now/CVE-2024-39820.md): Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element (CVSS 6.6)
- [CVE-2024-39819](https://cve.now/CVE-2024-39819.md): Zoom Workplace Apps and SDK for Windows - Improper Privilege Management (CVSS 6.7)
- [CVE-2024-39827](https://cve.now/CVE-2024-39827.md): Zoom Workplace Desktop App for Windows - Improper Input Validation (CVSS 5.5)
- [CVE-2024-39826](https://cve.now/CVE-2024-39826.md): Zoom Workplace Apps and SDKs - Path traversal (CVSS 6.8)
- [CVE-2024-27238](https://cve.now/CVE-2024-27238.md): Zoom Apps and SDKs - Race Condition (CVSS 7.1)
- [CVE-2024-27241](https://cve.now/CVE-2024-27241.md): Zoom Apps and SDKs - Improper Input Validation (CVSS 5.3)
- [CVE-2024-27240](https://cve.now/CVE-2024-27240.md): Zoom Apps for Windows - Improper Input Validation (CVSS 7.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/zoom-communications
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.