CVE-2022-28764

CVE-2022-28764 – Zoom Client for Meetings affects Zoom Client for Meetings (Android, iOS, Linux, macOS, Windows) prior to 5.12.6. Root cause: failure to clear data from a local SQL database after a meeting ends combined with insufficiently secure per-device key encryption of that database. Impact...

CVE-2021-34409

The CVE-2021-34409 issue affects Zoom products on macOS: Zoom Client for Meetings (MacOS) pre-5.2.0, Zoom Client Plugin for Sharing iPhone/iPad pre-5.2.0, and Zoom Rooms for Conference pre-5.1.0. The vulnerability arises because installation packages copy pre- and post-installation shell scripts ...

CVE-2021-34411

Technical details about CVE-2021-34411 are not publicly provided in the connected documents. The sources reiterate the same vulnerability description and do not specify affected versions beyond Zoom Rooms for Windows prior to 5.3.0. Monitor for updates.

CVE-2026-53410

CVE-2026-53410 describes a TOCTOU race condition in the installation and uninstallation flow of certain Zoom Clients for Windows that could allow an authenticated local user to escalate privileges. Affected components include Zoom Workplace for Windows, Zoom Workplace VDI Client, Zoom Workplace V...

CVE-2024-24691

CVE-2024-24691 affects Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows. Root cause: improper input validation that may allow an unauthenticated user to escalate privileges via network access. Impact per sources: high confidentiality, integrity, and a...

CVE-2022-22788

CVE-2022-22788 affects Zoom Client for Meetings <5.10.3 and Zoom Rooms for Windows

CVE-2022-22786

CVE-2022-22786 affects the Zoom Client for Meetings on Windows (and Zoom Rooms on Windows) prior to 5.10.0. The issue is that the updater does not properly check the installed version during updates, enabling a potential downgrade attack to push users to an older, less secure Zoom build. The vuln...

CVE-2022-28766

CVE-2022-28766 affects Windows 32‑bit builds of Zoom Client for Meetings and Zoom Rooms for Conference Room prior to 5.12.6. The issue is a DLL injection vulnerability that could allow a local, low‑privilege user to execute arbitrary code in the Zoom client process. Affected products: Zoom Client...

CVE-2023-36535

CVE-2023-36535 affects Zoom Client for Meetings prior to 5.14.10. The issue arises from client-side enforcement of server-side security, potentially allowing an authenticated user to disclose information via network access. Zoom has released fixes; NCSC notes this vulnerability is addressed in Zo...

CVE-2023-28597

CVE-2023-28597 affects Zoom clients prior to 5.13.5 and stems from an improper trust boundary implementation in SMB handling. An attacker on an adjacent network could lure a user who saves a local recording to an SMB location and later opens a link from Zoom’s web portal; by hosting a malicious S...

CVE-2024-45421

CVE-2024-45421 describes a buffer overflow in some Zoom Apps that could allow an authenticated user to escalate privileges over the network. The PT-2024-31624 entry specifies Zoom Product Suite versions prior to 6.2.0 as affected and recommends upgrading to 6.2.0 or later to address the issue. Ot...

CVE-2023-36539

CVE-2023-36539 — Zoom Client for Meetings information disclosure . The connected OpenVAS/Nessus entries confirm a vulnerability in Zoom Client for Meetings affecting Windows, macOS, and Linux, where unintended exposure of data “intended to be encrypted” could disclose sensitive information. Affec...

CVE-2025-46785

CVE-2025-46785 affects Zoom Workplace Apps for Windows. The issue is a buffer over-read in affected components that can allow an authenticated user to cause a denial of service over the network. The available sources (NVD/Red Hat/CVE listings, PT-2025-21206 notes) identify the vulnerability and i...

CVE-2023-22880

CVE-2023-22880 affects Zoom client on Windows: Zoom for Windows prior to 5.13.3, Zoom Rooms for Windows prior to 5.13.5, and Zoom VDI for Windows prior to 5.13.1. The vulnerability is an information disclosure caused by a Microsoft Edge WebView2 runtime update that sent text to Microsoft's online...

CVE-2025-27442

CVE-2025-27442 corresponds to a cross-site scripting vulnerability in Zoom Workplace Apps. The issue allows an unauthenticated attacker to potentially compromise integrity via adjacent network access, with user interaction required. The exploits/patch status is not detailed in the provided docume...

CVE-2024-24692

The CVE-2024-24692 entry concerns Zoom Rooms Client for Windows, where a race condition in the installer before version 5.17.5 may allow an authenticated local attacker to cause a denial of service. The issue is tied to the Windows installer process, with impact limited to availability (DOs) and ...

CVE-2023-43582

CVE-2023-43582 affects Zoom client software via improper authorization that can enable an escalation of privilege over the network from an authorized user. NVD records a high base score (8.8/3.1) with impact to confidentiality, integrity, and availability, and the vector is network-based with low...

CVE-2024-45417

Zoom Apps for macOS is affected by CVE-2024-45417 due to uncontrolled resource consumption in the installer prior to version 6.1.5. A privileged local user could leverage this to disclose information. The available details indicate the impact is information disclosure with local access, and remed...

CVE-2024-24690

The CVE-2024-24690 entry concerns Zoom clients with improper input validation that can allow an authenticated user to trigger a denial of service over the network. Connected documents corroborate affected Zoom products (e.g., Zoom Client for Meetings and Zoom VDI Client) and show vulnerable versi...

CVE-2024-27246

CVE-2024-27246 affects Zoom Workplace Apps and SDKs. The issue is a use-after-free in components handling network activity, allowing an authenticated user to cause a denial of service over the network. Used details: CVSS v3.1 base metrics indicate MEDIUM severity (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/...

CVE-2024-42438

The CVE-2024-42438 entry applies to Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. The issue is a buffer overflow in these components that allows an authenticated user to trigger a denial of service over the network. The available connected records confirm the affected product a...

CVE-2022-36929

CVE-2022-36929 affects Zoom Rooms Installer for Windows prior to 5.12.6. The vulnerability is a local privilege escalation during the install process, enabling a low-privileged user to gain SYSTEM authority. The connected sources confirm the affected software and the root cause as an installer-ti...

CVE-2025-0144

CVE-2025-0144 describes an out-of-bounds write in Zoom Workplace Apps that can lead to loss of integrity over a network when processing a specific request. Multiple sources confirm the issue affects Zoom Workplace Desktop App prior to version 6.2.5 (per Nessus ZSB-25003) and indicate the vulnerab...

CVE-2025-0145

CVE-2025-0145 affects Zoom Workplace Desktop App for Windows. Vulnerability: untrusted search path in the installer could allow an authorized local user to escalate privileges. Public details consistently reference installations prior to version 6.2.5 as affected (e.g., Nessus ZSB-25004 notes). R...

CVE-2024-39825

CVE-2024-39825 affects Zoom Workplace Apps and Rooms Clients. The issue is a heap-based buffer overflow that can allow an authenticated, remote attacker to escalate privileges over the network. Exploitation context: network access; no user interaction required; impact reported as high for confide...

CVE-2022-36924

Vulnerability summary (CVE-2022-36924) : Zoom Rooms Installer for Windows prior to version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this during the installation process to elevate privileges to SYSTEM. The PT Security entry notes an und...

CVE-2024-39822

CVE-2024-39822 affects Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. Affected: Zoom components vulnerable to information disclosure via network access by an authenticated user. Root cause: sensitive information exposure in these Zoom products. Impact: confidentiality loss witho...

CVE-2024-39824

CVE-2024-39824 affects Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. The issue is missing authorization that may allow a privileged user to disclose information over the network. The description and connected documents consistently identify the affected Zoom products and the im...

CVE-2022-36930

CVE-2022-36930 affects Zoom Rooms for Windows installers prior to version 5.13.0. The vulnerability is a local privilege escalation allowing a low-privileged user to escalate to SYSTEM, via an attack chain described as an uncontrolled search path element. Exploitation is local with low complexity...

CVE-2023-34121

CVE-2023-34121 concerns Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients prior to 5.14.0. The vulnerability stems from improper input validation, potentially allowing an authenticated user to escalate privileges via network access. Public sources in the provided documents consis...

CVE-2023-43591

The CVE-2023-43591 entry concerns Zoom Rooms for macOS prior to 5.16.0 with improper privilege management that may allow an authenticated user to escalate privileges via local access. Connected sources confirm affected product and version (Zoom Rooms for macOS

CVE-2024-24698

CVE-2024-24698 is described as an improper authentication vulnerability in Zoom clients that can allow a privileged user to disclose information via local access. The connected documents reference affected Zoom products (e.g., Zoom Client for Meetings and Zoom VDI/Desktop variants) and indicate t...

CVE-2024-24693

CVE-2024-24693 affects Zoom Rooms Client for Windows prior to 5.17.5. The issue is improper access control in the installer, which may allow an authenticated user to trigger a denial of service via local access. Affected component is the Windows installer, with the root cause described as install...

CVE-2024-27238

CVE-2024-27238 concerns a race condition in the Windows installer for Zoom products (Zoom Apps and SDKs) prior to version 6.0.0 that may allow a locally authenticated user to escalate privileges. Multiple sources describe the issue as a local race condition affecting Zoom components installed on ...

CVE-2024-42435

The CVE-2024-42435 entry covers a sensitive information disclosure in Zoom components. Affected software includes Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. The root cause and impact details in the provided sources indicate that a privileged user could obtain confidential da...

CVE-2024-45418

CVE-2024-45418 affects Zoom Apps for macOS prior to 6.1.5. The root cause is symlink following in the installer which could enable an authenticated user to escalate privileges over the network. Impact is elevated privileges on the host; no exploitation details are provided beyond the stated risk....

CVE-2025-30663

CVE-2025-30663 affects Zoom Workplace Apps. It describes a Time-of-check time-of-use race condition that could allow an authenticated user with local access to escalate privileges. Severity is high (CVSS v3.1 metrics show high impact to confidentiality, integrity, and availability; local attack w...

CVE-2025-30668

CVE-2025-30668 affects Zoom Workplace Apps. An integer underflow in affected components may allow an authenticated user to cause a denial of service over the network. The description/references in the supplied documents confirm the vulnerability type and impact (DoS) but do not provide concrete e...

CVE-2022-36926

Affected software: Zoom Rooms for macOS Vulnerability: Local privilege escalation in Zoom Rooms for macOS clients prior to version 5.11.3, enabling a low-privileged user to escalate to root. Root cause (per sources): Not explicitly detailed in the provided documents beyond the privilege escalatio...

CVE-2024-24699

CVE-2024-24699 affects Zoom clients via a business logic error that can disclose information to an authenticated user over the network. The base score is 6.5 (MEDIUM) with high confidentiality impact and no integrity/availability impact. Connected sources confirm this affects Zoom Client for Meet...

CVE-2024-39818

CVE-2024-39818 affects Zoom Workplace Apps and SDKs. The issue is a protection mechanism failure that may allow an authenticated user to disclose information over the network. CVSSv3.1: base score 6.5 (MEDIUM) from NVD, with Confidentiality Impact: High, Attack Vector: Network, Attack Complexity:...

CVE-2024-42434

The CVE-2024-42434 issue affects Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. It is described as a Missing authorization vulnerability that could allow a privileged user to disclose information over the network. The NVD/CVE entries and related sources cite a network-access att...

CVE-2024-42436

CVE-2024-42436 describes a buffer overflow in Zoom components: Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. The underlying issue allows an authenticated user, leveraging network access, to cause a denial of service. The NVD metrics assign a CVSS v3.1 base score of 6.5 (Medium) with...

CVE-2025-30671

CVE-2025-30671 affects Zoom Workplace Apps for Windows. The issue is a null pointer dereference that can allow an authenticated user to cause a denial of service over the network. Connected Nessus advisories note affected versions prior to 6.3.10 for Zoom Workplace Desktop/Client components and r...

CVE-2024-27239

CVE-2024-27239 is a use-after-free vulnerability in some Zoom Workplace Apps and SDKs that could allow an authenticated user to cause a denial-of-service over the network. Affected software is Zoom Workplace Apps and SDKs; root cause is use-after-free. Impact is DoS with network access; no explic...

CVE-2024-39823

CVE-2024-39823 affects Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. The connected sources indicate a missing authorization in these Zoom products could allow a privileged user to perform information disclosure over a network. The exact vulnerable components (versions, files) a...

CVE-2025-0146

CVE-2025-0146 affects Zoom Workplace App for macOS prior to 6.2.10. The issue arises from symlink following in the installer, allowing an authenticated user with local access to cause a denial of service. Public sources in the connected documents corroborate the DoS impact via local access due to...

CVE-2025-27441

CVE-2025-27441 is a cross-site scripting issue in Zoom Workplace Apps caused by improper filtering of user-supplied input. The vulnerability could allow an unauthenticated attacker to compromise data integrity via adjacent network access. The connected sources corroborate the vulnerability and it...

CVE-2022-36927

CVE-2022-36927 affects Zoom Rooms for macOS prior to version 5.11.3. The vulnerability is a local privilege escalation allowing a low-privileged user to escalate to root. The issue is documented across multiple feeds; the core description consistently cites Zoom Rooms for macOS before 5.11.3 as v...

CVE-2024-42440

CVE-2024-42440 affects Zoom on macOS: Zoom Workplace Desktop App, Zoom Meeting SDK, and Zoom Rooms Client prior to version 6.1.5 suffer from improper privilege management in the installer, enabling privilege escalation via local access. Public details from multiple sources confirm the affected co...