CVE-2026-108184

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access...

CVE-2026-108184

Certain Zoom Clients for Windows are vulnerable to improper certificate validation , which may allow an unauthenticated user to perform information disclosure via network access. The vulnerability is associated with CWE-295 . No specific exploit information or remediation steps are provided in th...

CVE-2026-108184

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access...

PT-2026-111621

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access...

CVE-2026-108184: Improper Certificate Validation

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access...

CVE-2026-53410: Time-of-check Time-of-use (TOCTOU) Race Condition

A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges...

CVE-2026-53411: Improper Input Validation

A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges...

CVE-2026-30900: Improper Check for Unusual or Exceptional Conditions

Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2026-30902: Improper Privilege Management

Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2025-58132: Improper Neutralization of Special Elements used in a Command

Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access...

PT-2025-42384

Name of the Vulnerable Software and Affected Versions Zoom Clients for Windows affected versions not specified Description A command injection issue exists in some Zoom Clients for Windows. An authenticated user may be able to disclose information via network access. Recommendations At the moment...

CVE-2025-49457: Untrusted Search Path

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2025-49456: Untrusted Search Path

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access...

CVE-2025-46789: Buffer Copy without Checking Size of Input

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access...

CVE-2025-49464: Buffer Copy without Checking Size of Input

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access...