CVE-2026-53411: Improper Input Validation

A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges...

CVE-2026-53410: Time-of-check Time-of-use (TOCTOU) Race Condition

A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges...

CVE-2026-30902: Improper Privilege Management

Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2026-30900: Improper Check for Unusual or Exceptional Conditions

Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2025-58132: Improper Neutralization of Special Elements used in a Command

Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access...

CVE-2025-49457: Untrusted Search Path

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2025-49456: Untrusted Search Path

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access...

CVE-2025-46789: Buffer Copy without Checking Size of Input

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access...

CVE-2025-49464: Buffer Copy without Checking Size of Input

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access...