Vulnerabilidades de Zoom
CVEs publicadas que afetam produtos de Zoom: 27 registro(s), com severidade, exploração e correções.
Workplace Virtual Desktop Infrastructure 13Rooms 11Workplace Desktop 11Meeting Software Development Kit 10Workplace 5Rooms Controller 2Remote Control 1Remote Control For Zoom Contact Center 1
CVE-2026-53412
Crítica · 9.8
CWE-20 16/07/2026
Zoom Workplace VDI Plugin for Windows - Improper Input Validation
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.
CVE-2026-53411
Alta · 7.0
CWE-20 16/07/2026
Zoom Workplace VDI Plugin for Windows - Improper Input Validation
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
CVE-2026-53410
Alta · 7.0
CWE-367 16/07/2026
Zoom Clients for Windows - Race Condition
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
CVE-2026-53409
Alta · 7.8
CWE-20 16/07/2026
Improper Input Validation em Zoom Rooms
Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2026-53408
Alta · 8.1
CWE-939 12/06/2026
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version…
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2026-53407
Crítica · 9.8
CWE-939 12/06/2026
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version…
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2026-53406
Alta · 7.8
CWE-345 12/06/2026
Insufficient Verification of Data Authenticity em Zoom Remote Control
Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.
CVE-2026-30906
Alta · 7.8
CWE-426 13/05/2026
Untrusted Search Path em Zoom Rooms
Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.
CVE-2026-30905
Alta · 7.8
CWE-610 13/05/2026
External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal…
External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2026-30904
Média · 4.3
CWE-693 13/05/2026
Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an…
Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access.
CVE-2026-30903
Crítica · 9.8
CWE-610 11/03/2026
External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows…
External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2026-30902
Alta · 7.8
CWE-269 11/03/2026
Zoom Clients for Windows - Improper Privilege Management
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2026-30901
Alta · 7.8
CWE-20 11/03/2026
Zoom Rooms for Windows - Improper Input Validation
Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2026-30900
Alta · 7.8
CWE-754 11/03/2026
Zoom Workplace Clients for Windows - Improper Check
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2025-67461
Média · 5.5
CWE-73 10/12/2025
Zoom Rooms for macOS - External Control of File Name or Path
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.
CVE-2025-67460
Alta · 7.8
CWE-693 10/12/2025
Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure
Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.
CVE-2025-62484
Crítica · 9.8
CWE-1333 13/11/2025
Zoom Workplace Clients - Inefficient Regular Expression Complexity
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2025-64741
Crítica · 9.8
CWE-74 13/11/2025
Zoom Workplace for Android - Improper Authorization Handling
Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2025-64740
Alta · 7.8
CWE-347 13/11/2025
Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2025-64739
Alta · 7.5
CWE-73 13/11/2025
Zoom Clients - External Control of File Name or Path
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-64738
Média · 5.5
CWE-73 13/11/2025
Zoom Workplace for macOS - External Control of File Name or Path
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
CVE-2025-62483
Alta · 7.5
CWE-212 13/11/2025
Zoom Clients - Improper Removal of Sensitive Information
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-62482
Média · 6.1
CWE-79 13/11/2025
Zoom Workplace for Windows - Cross-site Scripting
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
CVE-2025-30669
Média · 6.5
CWE-295 13/11/2025
Zoom Workplace Clients - Improper Certificate Validation
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
CVE-2025-30662
Média · 6.5
CWE-646 13/11/2025
Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following
Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.