Zoom Communications Inc. vulnerabilities
Published CVEs affecting Zoom Communications Inc. products: 36 record(s), with severity, exploitation and fixes.
Zoom Workplace 10Zoom Clients 8Zoom Rooms 6Zoom Workplace VDI Plugin 2Zoom Node 1Remote Control for Zoom Contact Center 1Zoom Clients for Windows 1Zoom Workplace for macOS 1Zoom Workplace VDI Client 1Zoom Workplace for Android 1Zoom Workplace Clients 1Zoom Workplace VDI Plugin macOS Universal installer 1Zoom Workplace for Windows 1Zoom VDI 1
CVE-2025-62484
Critical · 9.8
CWE-1333 Nov 13, 2025
Zoom Workplace Clients - Inefficient Regular Expression Complexity
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2025-64741
Critical · 9.8
CWE-74 Nov 13, 2025
Zoom Workplace for Android - Improper Authorization Handling
Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2025-64740
High · 7.8
CWE-347 Nov 13, 2025
Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2025-64739
High · 7.5
CWE-73 Nov 13, 2025
Zoom Clients - External Control of File Name or Path
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-64738
Medium · 5.5
CWE-73 Nov 13, 2025
Zoom Workplace for macOS - External Control of File Name or Path
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
CVE-2025-62483
High · 7.5
CWE-212 Nov 13, 2025
Zoom Clients - Improper Removal of Sensitive Information
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-62482
Medium · 6.1
CWE-79 Nov 13, 2025
Zoom Workplace for Windows - Cross-site Scripting
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
CVE-2025-30669
Medium · 6.5
CWE-295 Nov 13, 2025
Zoom Workplace Clients - Improper Certificate Validation
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
CVE-2025-30662
Medium · 6.5
CWE-646 Nov 13, 2025
Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following
Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.
CVE-2025-58133
High · 7.5
CWE-288 Oct 15, 2025
Zoom Rooms Clients - Authentication Bypass
Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-58132
Medium · 6.5
CWE-77 Oct 15, 2025
Zoom Clients for Windows - Command Injection
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.