CVE-2024-27240

CVE-2024-27240 concerns Zoom Apps for Windows where the installer contains improper input validation. The vulnerability affects the Zoom Apps installer component, enabling a local, authenticated user to escalate privileges via local access. The NVD metrics indicate LOCAL attack vector, LOW attack...

CVE-2024-39826

CVE-2024-39826 affects Zoom Workplace Apps and SDKs for Windows. The connected sources indicate a path traversal vulnerability in Zoom Workplace Desktop App for Windows (pre-6.0.0) that could let an authenticated user disclose information via network access. Affected component is the Windows Zoom...

CVE-2024-42441

CVE-2024-42441 affects Zoom macOS components (Zoom Workplace Desktop App, Zoom Meeting SDK, Zoom Rooms Client) prior to 6.1.5. The issue is improper privilege management in the installer, enabling a local escalation of privileges by a privileged user. Impact is eventuated as high confidentiality,...

CVE-2025-30664

CVE-2025-30664 is a cross-site scripting issue in Zoom Workplace Apps that could enable an authenticated local attacker to escalate privileges. The reported vector is local, requiring low privileges and user interaction, with a focus on improper neutralization of special elements as the root caus...

CVE-2025-30666

CVE-2025-30666 corresponds to a NULL pointer dereference in Zoom Workplace Apps for Windows. The vulnerability could allow an authenticated user to cause a denial of service over the network, with CVSSv3.1 base metrics indicating Availability Impact: HIGH and Confidentiality/Integrity Impact: NON...

CVE-2025-49457

CVE-2025-49457 affects Zoom Clients for Windows (multiple Zoom products: Zoom Workplace for Windows, Zoom Rooms for Windows, Zoom Rooms Controller, Zoom Meeting SDK for Windows) where an untrusted search path could allow an unauthenticated attacker to escalate privileges over the network. Affecte...

CVE-2024-45420

CVE-2024-45420 relates to Zoom Apps. The connected PT-2024-31623 note confirms the issue: an authenticated user can trigger a denial of service via network access due to uncontrolled resource consumption in Zoom Apps before version 6.2.0. Affected software: Zoom Apps prior to 6.2.0. Impact: DoS c...

CVE-2025-46786

The CVE-2025-46786 entry concerns Zoom Workplace Apps (including Zoom Workplace Desktop App) with an improper neutralization of special elements that enables Cross-site Scripting by an authenticated user over the network, potentially impacting app integrity. The vulnerability affects the app’s ab...

CVE-2025-30665

The CVE-2025-30665 entry concerns Zoom Workplace Apps for Windows, where a NULL pointer dereference could allow an authenticated user to cause a denial of service over the network. Affected component is Zoom Workplace Apps for Windows (specific versions not listed in the provided docs). The under...

CVE-2025-46788

CVE-2025-46788 affects Zoom Workplace for Linux prior to version 6.4.13, with an improper certificate validation vulnerability that can lead to information disclosure over the network. Affected component: Zoom Workplace for Linux; root cause: improper TLS certificate validation. Impact per source...

CVE-2025-58132

The CVE-2025-58132 issue affects Zoom Clients for Windows. It is a command injection vulnerability that could allow an authenticated user to disclose information over the network. Reported in multiple feeds (NVD, Red Hat, EUVD) with the same description, the vulnerability’s impact centers on conf...

CVE-2026-30902

CVE-2026-30902 concerns an elevation of privilege in Zoom Clients for Windows due to improper privilege management. An authenticated user may exploit local access to escalate privileges. The description notes a high-severity outcome (CVSS v3.1 base score 7.8, impact on confidentiality, integrity ...

CVE-2025-49458

CVE-2025-49458 describes a buffer overflow in Zoom Workplace Clients that could allow an authenticated user to cause a denial of service over the network. Public documentation and scanner advisories (e.g., ZSB-25031) indicate the issue affects Zoom Workplace Clients generally and is mitigated by ...

CVE-2026-30903

CVE-2026-30903 concerns Zoom Workplace for Windows prior to 6.6.0. The issue is described as External Control of File Name or Path in the Mail feature, which may allow an unauthenticated user to escalate privileges over the network. Affected product/feature: Zoom Workplace for Windows (Mail featu...

CVE-2025-58135

CVE-2025-58135 concerns Zoom Workplace Clients for Windows. The vulnerability arises from improper action enforcement, enabling an unauthenticated attacker to disclose information via network access. Affected product family: Zoom Workplace Clients for Windows; root cause is improper enforcement o...

CVE-2026-30900

CVE-2026-30900 affects Zoom Clients for Windows. It describes an improper check of minimum version in the update functionality, enabling an authenticated user with local access to escalate privileges (local, required privileges: low; UI: none; scope: unchanged; impact: high on confidentiality, in...

CVE-2025-49456

CVE-2025-49456 concerns a race condition in the installer of Zoom Clients for Windows. The connected sources consistently describe that the vulnerability stems from a faulty installer process, allowing an unauthenticated local user to impact (compromise) application integrity. The affected softwa...

CVE-2025-49461

CVE-2025-49461 concerns Zoom Workplace Clients affected by a cross-site scripting vulnerability that may allow an unauthenticated attacker to cause a denial of service over the network. The issue is described in the ZSB-25034 advisory and is associated with Zoom Workplace versions prior to 6.3.14...

CVE-2025-62482

CVE-2025-62482 corresponds to a cross-site scripting flaw in Zoom Workplace for Windows, fixed in versions 6.5.10 and later. Affects Zoom Workplace prior to 6.5.10; an unauthenticated attacker could impact integrity via network access. Connected sources confirm the vulnerability and the vendor-pr...

CVE-2025-64739

The CVE-2025-64739 issue affects Zoom Workplace and Zoom Clients. The vulnerability is described as external control of a file name or path, enabling an unauthenticated user to disclose information over the network. Public advisories (NCSC, Red Hat, CVE listings) confirm the flaw and indicate mit...

CVE-2025-64738

CVE-2025-64738 affects Zoom Workplace on macOS prior to 6.5.10. An authenticated user can trigger external control of a file name or path, enabling information disclosure via local access. The issue is tied to Zoom Workplace versions before 6.5.10; remediation is to upgrade to 6.5.10 or later per...

CVE-2025-58134

CVE-2025-58134 concerns Zoom Workplace Windows clients. Multiple sources confirm an Incorrect authorization issue that may allow an authenticated user to impact integrity over the network. Affected products include Zoom Workplace Clients for Windows (and related VDI/WIN components in Nessus refer...

CVE-2025-49460

The CVE-2025-49460 issue affects Zoom Workplace family components (notably Zoom Workplace/VDI Client) with versions older than fixed releases. The publicly documented impact is Uncontrolled resource consumption that allows an unauthenticated remote attacker to cause a denial of service over the n...

CVE-2025-62483

CVE-2025-62483 affects Zoom Clients prior to v6.5.10, where improper removal of sensitive information could allow an unauthenticated user to disclose data over the network. Connected sources corroborate the issue and note a fixed version (6.5.10) across Zoom Workplace and Zoom Clients. The NVD/NC...

CVE-2025-30669

CVE-2025-30669 affects Zoom Workplace/Zoom Clients (prior to fixed versions such as 6.5.10). The root cause described in connected advisories is improper certificate validation, which may allow an unauthenticated attacker to disclose information via adjacent access. The issue spans Zoom Client co...