Vulnerabilities (CVE)

Filtered by vendor Zoom Subscribe
Filtered by product Rooms Controller
Total 44 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-64739 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 4.3 MEDIUM
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-62483 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 5.3 MEDIUM
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-58135 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 5.3 MEDIUM
Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-58134 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 4.3 MEDIUM
Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access.
CVE-2025-49461 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2026-06-17 N/A 4.3 MEDIUM
Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
CVE-2025-49460 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2026-06-17 N/A 4.3 MEDIUM
Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
CVE-2025-49458 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 6.5 MEDIUM
Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-49457 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 9.6 CRITICAL
Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access
CVE-2025-49456 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 6.2 MEDIUM
Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access.
CVE-2025-46786 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2026-06-17 N/A 4.3 MEDIUM
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.
CVE-2025-46785 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 6.5 MEDIUM
Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30671 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 6.5 MEDIUM
Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30670 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 6.5 MEDIUM
Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30668 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2026-06-17 N/A 6.5 MEDIUM
Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30667 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2026-06-17 N/A 6.5 MEDIUM
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30666 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 6.5 MEDIUM
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30665 1 Zoom 5 Meeting Software Development Kit, Rooms, Rooms Controller and 2 more 2026-06-17 N/A 6.5 MEDIUM
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
CVE-2025-30664 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2026-06-17 N/A 6.6 MEDIUM
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2025-30663 1 Zoom 6 Meeting Software Development Kit, Rooms, Rooms Controller and 3 more 2026-06-17 N/A 8.8 HIGH
Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2025-27443 1 Zoom 4 Meeting Software Development Kit, Rooms, Rooms Controller and 1 more 2026-06-17 N/A 2.8 LOW
Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access.