Vulnerabilities (CVE)

Filtered by vendor Zoom Subscribe
Filtered by product Rooms
Total 80 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-42441 1 Zoom 3 Meeting Software Development Kit, Rooms, Workplace Desktop 2025-10-02 N/A 6.2 MEDIUM
Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.
CVE-2024-42434 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2025-10-02 N/A 4.9 MEDIUM
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
CVE-2024-39824 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2025-10-02 N/A 4.9 MEDIUM
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
CVE-2024-39823 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2025-10-02 N/A 4.9 MEDIUM
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
CVE-2024-39819 1 Zoom 3 Meeting Software Development Kit, Rooms, Workplace Desktop 2025-10-02 N/A 6.7 MEDIUM
Integrity checkĀ in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access.
CVE-2024-27239 1 Zoom 5 Meeting Software Development Kit, Rooms, Workplace and 2 more 2025-10-01 N/A 4.3 MEDIUM
Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-49457 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2025-09-08 N/A 9.6 CRITICAL
Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access
CVE-2025-49456 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2025-09-08 N/A 6.2 MEDIUM
Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access.
CVE-2024-27245 1 Zoom 5 Meeting Software Development Kit, Rooms, Workplace and 2 more 2025-08-20 N/A 4.3 MEDIUM
Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
CVE-2024-27246 1 Zoom 5 Meeting Software Development Kit, Rooms, Workplace and 2 more 2025-08-20 N/A 4.3 MEDIUM
Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
CVE-2024-27241 1 Zoom 5 Meeting Software Development Kit, Rooms, Workplace and 2 more 2025-08-20 N/A 5.3 MEDIUM
Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-0145 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2025-08-20 N/A 4.6 MEDIUM
Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.
CVE-2025-0144 1 Zoom 7 Meeting Software Development Kit, Rooms, Rooms Controller and 4 more 2025-08-20 N/A 3.1 LOW
Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access.
CVE-2025-46785 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2025-08-19 N/A 6.5 MEDIUM
Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-0149 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2025-08-19 N/A 6.5 MEDIUM
Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.
CVE-2024-45419 1 Zoom 7 Meeting Software Development Kit, Rooms, Rooms Controller and 4 more 2025-08-19 N/A 8.1 HIGH
Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2024-45420 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2025-08-19 N/A 4.3 MEDIUM
Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access.
CVE-2024-45422 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2025-08-19 N/A 6.5 MEDIUM
Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access.
CVE-2025-30665 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2025-08-05 N/A 6.5 MEDIUM
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30666 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2025-08-05 N/A 6.5 MEDIUM
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.