Vulnerabilidades do Zoom Meeting Software Development Kit
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Zoom Meeting Software Development Kit: 10 registro(s), com versões afetadas e correções.cpe:2.3:a:zoom:meeting_software_development_kit
CVE-2026-53408
Alta · 8.1
CWE-939 12/06/2026
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version…
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2026-30900
Alta · 7.8
CWE-754 11/03/2026
Zoom Workplace Clients for Windows - Improper Check
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2025-62484
Crítica · 9.8
CWE-1333 13/11/2025
Zoom Workplace Clients - Inefficient Regular Expression Complexity
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2025-64741
Crítica · 9.8
CWE-74 13/11/2025
Zoom Workplace for Android - Improper Authorization Handling
Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2025-64739
Alta · 7.5
CWE-73 13/11/2025
Zoom Clients - External Control of File Name or Path
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-64738
Média · 5.5
CWE-73 13/11/2025
Zoom Workplace for macOS - External Control of File Name or Path
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
CVE-2025-62483
Alta · 7.5
CWE-212 13/11/2025
Zoom Clients - Improper Removal of Sensitive Information
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-62482
Média · 6.1
CWE-79 13/11/2025
Zoom Workplace for Windows - Cross-site Scripting
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
CVE-2025-30669
Média · 6.5
CWE-295 13/11/2025
Zoom Workplace Clients - Improper Certificate Validation
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
CVE-2025-58132
Média · 6.5
CWE-77 15/10/2025
Zoom Clients for Windows - Command Injection
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.