Vulnerabilidades de Zoom Communications Inc.
CVEs publicadas que afetam produtos de Zoom Communications Inc.: 36 registro(s), com severidade, exploração e correções.
Zoom Workplace 10Zoom Clients 8Zoom Rooms 6Zoom Workplace VDI Plugin 2Zoom Node 1Remote Control for Zoom Contact Center 1Zoom Clients for Windows 1Zoom Workplace for macOS 1Zoom Workplace VDI Client 1Zoom Workplace for Android 1Zoom Workplace Clients 1Zoom Workplace VDI Plugin macOS Universal installer 1Zoom Workplace for Windows 1Zoom VDI 1
CVE-2025-62484
Crítica · 9.8
CWE-1333 13/11/2025
Zoom Workplace Clients - Inefficient Regular Expression Complexity
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2025-64741
Crítica · 9.8
CWE-74 13/11/2025
Zoom Workplace for Android - Improper Authorization Handling
Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2025-64740
Alta · 7.8
CWE-347 13/11/2025
Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2025-64739
Alta · 7.5
CWE-73 13/11/2025
Zoom Clients - External Control of File Name or Path
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-64738
Média · 5.5
CWE-73 13/11/2025
Zoom Workplace for macOS - External Control of File Name or Path
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
CVE-2025-62483
Alta · 7.5
CWE-212 13/11/2025
Zoom Clients - Improper Removal of Sensitive Information
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-62482
Média · 6.1
CWE-79 13/11/2025
Zoom Workplace for Windows - Cross-site Scripting
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
CVE-2025-30669
Média · 6.5
CWE-295 13/11/2025
Zoom Workplace Clients - Improper Certificate Validation
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
CVE-2025-30662
Média · 6.5
CWE-646 13/11/2025
Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following
Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.
CVE-2025-58133
Alta · 7.5
CWE-288 15/10/2025
Zoom Rooms Clients - Authentication Bypass
Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVE-2025-58132
Média · 6.5
CWE-77 15/10/2025
Zoom Clients for Windows - Command Injection
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.