RO
Product
Rooms
109
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 58Medium 49Low 1
Watch
Add Rooms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36532 | 7.5 | Aug 8 | Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access Affected: before 5.14.5; before 5.14.5; before 5.14.5; before 5.14.5 |
| CVE-2023-36539 | 7.5 | Jun 30 | Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information Affected: 5.15.0; 5.15.0; 5.15.0 |
| CVE-2023-28597 | 7.5 | Mar 27 | Improper trust boundary implementation for SMB in Zoom Clients Affected: before 5.13.5; before 5.13.5; before 5.13.5; before 5.13.5; before 5.13.5 |
| CVE-2023-22880 | 7.5 | Mar 16 | Information Disclosure in Zoom for Windows Clients Affected: before 5.13.3 |
| CVE-2025-49461 | 7.4 | Sep 9 | Zoom Workplace Clients - Cross-site Scripting Affected: before 6.5.0; before 6.5.0; before 6.5.0; before 6.5.0 |
| CVE-2024-39819 | 7.3 | Jul 15 | Zoom Workplace Apps and SDK for Windows - Improper Privilege Management Affected: before 5.17.13 |
| CVE-2022-28766 | 7.3 | Nov 17 | DLL injection in Zoom Windows Clients Affected: before 5.12.6 |
| CVE-2026-53410 | 7.0 | Jul 16 | Zoom Clients for Windows - Race Condition Affected: before 7.0.5 |
| CVE-2025-30663 | 7.0 | May 14 | Zoom Workplace Apps - Time-of-check Time-of-use Affected: before 6.4.0; before 6.4.0; before 6.4.0; before 6.4.0 |
| CVE-2024-42441 | 6.7 | Aug 14 | Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Incorrect Privilege Assignment Affected: before 6.1.5 |
| CVE-2024-42440 | 6.7 | Aug 14 | Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Improper Privilege Management Affected: before 6.1.5 |
| CVE-2025-58132 | 6.5 | Oct 15 | Zoom Clients for Windows - Command Injection Affected: before 6.5.5 |
| CVE-2025-58135 | 6.5 | Sep 9 | Zoom Workplace Clients for Windows - Improper Action Enforcement Affected: before 6.5.0 |
| CVE-2025-49458 | 6.5 | Sep 9 | Zoom Workplace Clients - Buffer Overflow Affected: before 6.5.0; before 6.5.0; before 6.5.0 |
| CVE-2025-46785 | 6.5 | May 14 | Zoom Workplace Apps for Windows - Buffer Over-read Affected: before 6.4.0 |
| CVE-2025-30668 | 6.5 | May 14 | Zoom Workplace Apps - NULL Pointer Dereference Affected: before 6.4.0; before 6.4.0; before 6.4.0; before 6.4.0 |
| CVE-2025-30667 | 6.5 | May 14 | Zoom Workplace Apps - NULL Pointer Dereference Affected: before 6.4.0; before 6.4.0; before 6.4.0; before 6.4.0 |
| CVE-2025-30666 | 6.5 | May 14 | Zoom Workplace Apps for Windows - NULL Pointer Dereference Affected: before 6.4.0 |
| CVE-2025-30665 | 6.5 | May 14 | Zoom Workplace Apps for Windows - NULL Pointer Dereference Affected: before 6.4.0 |
| CVE-2025-30671 | 6.5 | Apr 8 | Zoom Workplace Apps for Windows - Null Pointer Affected: before 6.4.0 |
| CVE-2025-30670 | 6.5 | Apr 8 | Zoom Workplace Apps for Windows - Null Pointer Affected: before 6.4.0 |
| CVE-2024-27239 | 6.5 | Feb 25 | Zoom Workplace Apps and SDKs - Divide By Zero Affected: before 6.0.0; before 6.0.0; before 6.0.0 |
| CVE-2024-27246 | 6.5 | Feb 25 | Zoom Workplace Apps and SDKs - Use After Free Affected: before 6.0.0; before 6.0.0; before 6.0.0 |
| CVE-2024-27245 | 6.5 | Feb 25 | Zoom Workplace Apps and SDKs - Buffer Overflow Affected: before 6.0.0; before 6.0.0; before 6.0.0 |
| CVE-2024-45426 | 6.5 | Feb 25 | Zoom Workplace Apps - Incorrect Ownership Assignment Affected: before 6.1.0; before 6.1.0 |
| CVE-2024-45425 | 6.5 | Feb 25 | Zoom Workplace Apps - Incorrect User Management Affected: before 6.1.0; before 6.1.0 |
| CVE-2025-0144 | 6.5 | Jan 30 | Zoom Workplace Apps - Out-of-bounds Write Affected: before 6.2.5; before 6.2.5; before 6.2.5 |
| CVE-2024-45420 | 6.5 | Nov 19 | Zoom Apps - Uncontrolled Resource Consumption Affected: before 6.2.0; before 6.2.0; before 6.2.0 |
| CVE-2024-42438 | 6.5 | Aug 14 | Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow Affected: before 6.1.0; before 6.1.0; before 6.1.0 |
| CVE-2024-42437 | 6.5 | Aug 14 | Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow Affected: before 6.1.0; before 6.1.0; before 6.1.0 |
| CVE-2024-42436 | 6.5 | Aug 14 | Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow Affected: before 6.1.0; before 6.1.0; before 6.1.0 |
| CVE-2024-39822 | 6.5 | Aug 14 | Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure Affected: before 6.1.0; before 6.1.0; before 6.1.0 |
| CVE-2024-39818 | 6.5 | Aug 14 | Zoom Workplace Apps and SDKs - Protection Mechanism Failure Affected: before 6.0.0; before 6.0.0; before 6.0.0 |
| CVE-2024-24690 | 6.5 | Feb 14 | Zoom Clients - Improper Input Validation Affected: before 5.17.0 |
| CVE-2024-24699 | 6.5 | Feb 13 | Zoom Clients - Business Logic Error Affected: before 5.17.0 |
| CVE-2023-39199 | 6.5 | Nov 14 | Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-36535 | 6.5 | Aug 8 | Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access Affected: before 5.14.10; before 5.14.10; before 5.14.10; before 5.14.10 |
| CVE-2024-27238 | 6.3 | Jul 15 | Zoom Apps and SDKs - Race Condition Affected: before 6.0.0 |
| CVE-2025-46786 | 6.1 | May 14 | Zoom Workplace Apps - Cross-site Scripting Affected: before 6.4.0; before 6.4.0; before 6.4.0; before 6.4.0 |
| CVE-2025-67461 | 5.5 | Dec 10 | Zoom Rooms for macOS - External Control of File Name or Path Affected: before 6.6.0 |
| CVE-2025-27443 | 5.5 | Apr 8 | Zoom Workplace Apps for Windows - Insecure Default Variable Initialization Affected: before 6.4.0 |
| CVE-2024-45417 | 5.5 | Feb 25 | Zoom Apps for macOS - Uncontrolled Resource Consumption Affected: before 6.1.5 |
| CVE-2024-24693 | 5.5 | Mar 13 | Zoom Rooms Client for Windows - Improper Access Control Affected: before 5.17.5 |
| CVE-2023-39202 | 5.5 | Nov 14 | Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access Affected: before 5.16.0 |
| CVE-2023-39212 | 5.5 | Aug 8 | Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access Affected: before 5.15.5 |
| CVE-2025-27442 | 5.2 | Apr 8 | Zoom Workplace Apps - Cross Site Scripting Affected: before 6.4.0; before 6.4.0; before 6.4.0; before 6.4.0 |
| CVE-2025-27441 | 5.2 | Apr 8 | Zoom Workplace Apps - Cross Site Scripting Affected: before 6.4.0; before 6.4.0; before 6.4.0; before 6.4.0 |
| CVE-2025-49456 | 5.1 | Aug 12 | Zoom Clients for Windows- Race Condition Affected: before 6.4.5 |
| CVE-2025-0146 | 5.0 | Jan 30 | Zoom Workplace app for macOS - Symlink Following Affected: before 6.2.10 |
| CVE-2024-42435 | 4.9 | Aug 14 | Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure Affected: before 6.1.0; before 6.1.0; before 6.1.0 |