Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 90

Export CSV
CVE-2025-64741

Zoom Workplace for Android - Improper Authorization Handling

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Google Zoom
Products
Android Meeting Software Development Kit Workplace and 2 more
CVE-2025-30662

Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Zoom
Products
Macos Workplace Workplace App and 2 more
CVE-2025-62484

Zoom Workplace Clients - Inefficient Regular Expression Complexity

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Meeting Software Development Kit Workplace Workplace App and 1 more
CVE-2025-62483

Zoom Clients - Improper Removal of Sensitive Information

Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Meeting Software Development Kit Rooms Rooms Controller and 4 more
CVE-2025-64738

Zoom Workplace for macOS - External Control of File Name or Path

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Zoom
Products
Macos Meeting Software Development Kit Workplace and 3 more
CVE-2024-42441

Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Incorrect Privilege Assignment

Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Macos Meeting Sdk Meeting Software Development Kit Rooms and 1 more
CVE-2024-42434

Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization

Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Meeting Software Development Kit Rooms Rooms Controller and 3 more
CVE-2025-58135

Zoom Workplace Clients for Windows - Improper Action Enforcement

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft Zoom
Products
Windows Meeting Software Development Kit Rooms and 6 more