Vulnerabilidades do Zoom Workplace Desktop
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Zoom Workplace Desktop: 11 registro(s), com versões afetadas e correções.cpe:2.3:a:zoom:workplace_desktop
CVE-2026-53412
Crítica · 9.8
CWE-20 16/07/2026
Improper Input Validation em Zoom Workplace Desktop
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.
CVE-2026-53410
Alta · 7.0
CWE-367 16/07/2026
TOCTOU Race Condition em Zoom Remote Control For Zoom Contact Center
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
CVE-2026-30903
Crítica · 9.8
CWE-610 11/03/2026
External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows…
External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2026-30902
Alta · 7.8
CWE-269 11/03/2026
Zoom Clients for Windows - Improper Privilege Management
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2026-30900
Alta · 7.8
CWE-754 11/03/2026
Zoom Workplace Clients for Windows - Improper Check
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2025-64739
Alta · 7.5
CWE-73 13/11/2025
Zoom Clients - External Control of File Name or Path
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-64738
Média · 5.5
CWE-73 13/11/2025
Zoom Workplace for macOS - External Control of File Name or Path
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
CVE-2025-62483
Alta · 7.5
CWE-212 13/11/2025
Zoom Clients - Improper Removal of Sensitive Information
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-62482
Média · 6.1
CWE-79 13/11/2025
Zoom Workplace for Windows - Cross-site Scripting
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
CVE-2025-30669
Média · 6.5
CWE-295 13/11/2025
Zoom Workplace Clients - Improper Certificate Validation
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
CVE-2025-58132
Média · 6.5
CWE-77 15/10/2025
Zoom Clients for Windows - Command Injection
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.