Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 112

Export CSV
CVE-2025-67460

Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure

Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft Zoom
Products
Windows Rooms Zoom
CVE-2025-62483

Zoom Clients - Improper Removal of Sensitive Information

Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Meeting Software Development Kit Rooms Rooms Controller and 4 more
CVE-2025-64738

Zoom Workplace for macOS - External Control of File Name or Path

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Zoom
Products
Macos Meeting Software Development Kit Workplace and 3 more
CVE-2025-67461

Zoom Rooms for macOS - External Control of File Name or Path

External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Zoom
Products
Macos Rooms Zoom
CVE-2025-58133

Zoom Rooms Clients - Authentication Bypass

Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft Zoom
Products
Windows Rooms Zoom
CVE-2025-58135

Zoom Workplace Clients for Windows - Improper Action Enforcement

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft Zoom
Products
Windows Meeting Software Development Kit Rooms and 6 more
CVE-2024-39819

Zoom Workplace Apps and SDK for Windows - Improper Privilege Management

Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Meeting Software Development Kit Rooms Workplace Desktop and 2 more
CVE-2025-46789

Zoom Clients for Windows - Classic Buffer Overflow

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Zoom
CVE-2025-49462

Zoom Clients - Cross-site Scripting

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Zoom
CVE-2025-49463

Zoom Clients for iOS - Insufficient Control Flow Management

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Zoom
CVE-2025-49464

Zoom Clients for Windows- Classic Buffer Overflow

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Zoom