CVE Intelligence

Vulnerabilidades do Zoom Rooms

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Zoom Rooms: 9 registro(s), com versões afetadas e correções.
cpe:2.3:a:zoom:rooms

CVE-2026-30906 Alta · 7.8 CWE-426 13/05/2026
Untrusted Search Path em Zoom Rooms
Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.
CVE-2026-30902 Alta · 7.8 CWE-269 11/03/2026
Zoom Clients for Windows - Improper Privilege Management
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2026-30901 Alta · 7.8 CWE-20 11/03/2026
Zoom Rooms for Windows - Improper Input Validation
Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2025-67461 Média · 5.5 CWE-73 10/12/2025
Zoom Rooms for macOS - External Control of File Name or Path
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.
CVE-2025-67460 Alta · 7.8 CWE-693 10/12/2025
Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure
Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.
CVE-2025-64739 Alta · 7.5 CWE-73 13/11/2025
Zoom Clients - External Control of File Name or Path
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-62483 Alta · 7.5 CWE-212 13/11/2025
Zoom Clients - Improper Removal of Sensitive Information
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-58133 Alta · 7.5 CWE-288 15/10/2025
Zoom Rooms Clients - Authentication Bypass
Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-58132 Média · 6.5 CWE-77 15/10/2025
Zoom Clients for Windows - Command Injection
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.