Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 18

Export CSV
CVE-2025-49459

Zoom Workplace for Windows on ARM - Missing Authorization

Missing authorization in the installer for Zoom Workplace for Windows on ARM before version 6.5.0 may allow an authenticated user to conduct an escalation of privilege via local access.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Arm Microsoft Zoom
Products
Arm Windows Workplace and 2 more
CVE-2025-64740

Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Microsoft Zoom
Products
Windows Workplace Workplace App and 3 more
CVE-2025-64741

Zoom Workplace for Android - Improper Authorization Handling

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Google Zoom
Products
Android Meeting Software Development Kit Workplace and 2 more
CVE-2025-30662

Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Zoom
Products
Macos Workplace Workplace App and 2 more
CVE-2025-62484

Zoom Workplace Clients - Inefficient Regular Expression Complexity

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Meeting Software Development Kit Workplace Workplace App and 1 more
CVE-2025-64738

Zoom Workplace for macOS - External Control of File Name or Path

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Zoom
Products
Macos Meeting Software Development Kit Workplace and 3 more
CVE-2025-58135

Zoom Workplace Clients for Windows - Improper Action Enforcement

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft Zoom
Products
Windows Meeting Software Development Kit Rooms and 6 more
CVE-2024-39818

Zoom Workplace Apps and SDKs - Protection Mechanism Failure

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Rooms Vdi Windows Meeting Client Workplace and 3 more
CVE-2024-39825

Zoom Workplace Apps and Rooms Clients - Buffer Overflow

Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Rooms Vdi Windows Meeting Client Workplace and 3 more