WV
Product
Workplace Virtual Desktop Infrastructure
60
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 25Medium 33Low 0
Watch
Add Workplace Virtual Desktop Infrastructure to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53412 | 9.8 | Jul 16 | Zoom Workplace VDI Plugin for Windows - Improper Input Validation Affected: 6.5.0 before 6.5.18; 6.6.0 before 6.6.15; 7.0.0 before 7.0.10 |
| CVE-2026-30903 | 9.8 | Mar 11 | External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via… Affected: 6.4.0 before 6.4.17; 6.5.0 before 6.5.15; 6.6.0 before 6.6.10 |
| CVE-2025-49457 | 8.8 | Aug 12 | Zoom Clients for Windows - Untrusted Search Path Affected: before 6.1.16; 6.2.10 before 6.2.12 |
| CVE-2025-27440 | 8.8 | Mar 11 | Zoom Apps - Heap-based Buffer Overflow Affected: before 6.1.16; 6.1.17 before 6.2.12 |
| CVE-2025-27439 | 8.8 | Mar 11 | Zoom Apps - Buffer Underflow Affected: before 6.1.16; 6.1.17 before 6.2.12 |
| CVE-2025-0151 | 8.8 | Mar 11 | Zoom Apps - Use After Free Affected: before 6.1.16; 6.1.17 before 6.2.12 |
| CVE-2024-45421 | 8.8 | Feb 25 | Zoom Apps - Buffer Overflow Affected: before 6.1.12 |
| CVE-2024-39825 | 8.5 | Aug 14 | Zoom Workplace Apps and Rooms Clients - Buffer Overflow Affected: before 5.17.13 |
| CVE-2025-30664 | 8.2 | May 14 | Zoom Workplace Apps - Cross-site Scripting Affected: before 6.3.10 |
| CVE-2026-30905 | 7.8 | May 13 | External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation… Affected: before 6.6.11 |
| CVE-2026-30902 | 7.8 | Mar 11 | Zoom Clients for Windows - Improper Privilege Management Affected: 6.4.0 before 6.4.15; 6.5.0 before 6.5.13; 6.6.0 before 6.6.10 |
| CVE-2026-30900 | 7.8 | Mar 11 | Zoom Workplace Clients for Windows - Improper Check Affected: through 6.6.10 |
| CVE-2025-64740 | 7.8 | Nov 13 | Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature Affected: before 6.3.14; 6.4.10 before 6.4.12 |
| CVE-2025-0145 | 7.8 | Jan 30 | Zoom Workplace Apps for Windows - Untrusted Search Path Affected: before 6.0.15; 6.0.16 before 6.1.13 |
| CVE-2024-27240 | 7.8 | Jul 15 | Zoom Apps for Windows - Improper Input Validation Affected: before 5.17.13 |
| CVE-2024-27244 | 7.8 | May 15 | Zoom Workplace VDI App for Windows - Insufficient Verification of Data Authenticity Affected: before 5.15.0; 5.16.0 before 5.17.10 |
| CVE-2025-62483 | 7.5 | Nov 13 | Zoom Clients - Improper Removal of Sensitive Information Affected: before 6.3.14; 6.4.10 before 6.4.12 |
| CVE-2025-64739 | 7.5 | Nov 13 | Zoom Clients - External Control of File Name or Path Affected: before 6.3.14; 6.4.10 before 6.4.12 |
| CVE-2025-49460 | 7.5 | Sep 9 | Zoom Workplace Clients - Argument Injection Affected: before 6.3.14; 6.4.0 before 6.4.12 |
| CVE-2025-0149 | 7.5 | Mar 11 | Zoom Apps - Insufficient Verification of Data Authenticity Affected: before 6.1.15; 6.1.16 before 6.2.10 |
| CVE-2024-45424 | 7.5 | Feb 25 | Zoom Workplace Apps - Business Logic Error Affected: before 6.1.10 |
| CVE-2024-45419 | 7.5 | Nov 19 | Zoom Apps - Improper Input Validation Affected: before 6.0.14; 6.0.15 before 6.1.12 |
| CVE-2024-27241 | 7.5 | Jul 15 | Zoom Apps and SDKs - Improper Input Validation Affected: before 5.17.13 |
| CVE-2025-49461 | 7.4 | Sep 9 | Zoom Workplace Clients - Cross-site Scripting Affected: before 6.3.14; 6.4.0 before 6.4.12 |
| CVE-2026-53411 | 7.0 | Jul 16 | Zoom Workplace VDI Plugin for Windows - Improper Input Validation Affected: before 6.6.14 |
| CVE-2026-53410 | 7.0 | Jul 16 | Zoom Clients for Windows - Race Condition Affected: before 6.5.17; 6.6.0 before 6.6.14 |
| CVE-2025-30663 | 7.0 | May 14 | Zoom Workplace Apps - Time-of-check Time-of-use Affected: before 6.1.17; 6.1.18 before 6.2.13; 6.2.14 before 6.3.10 |
| CVE-2024-39826 | 6.8 | Jul 15 | Zoom Workplace Apps and SDKs - Path traversal Affected: before 5.17.13 |
| CVE-2025-30662 | 6.5 | Nov 13 | Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following Affected: before 6.3.14; 6.4.0 before 6.4.14; 6.5.0 before 6.5.10 |
| CVE-2025-30669 | 6.5 | Nov 13 | Zoom Workplace Clients - Improper Certificate Validation Affected: before 6.3.14; 6.4.10 before 6.4.12 |
| CVE-2025-58132 | 6.5 | Oct 15 | Zoom Clients for Windows - Command Injection Affected: before 6.3.15; 6.4.0 before 6.4.13 |
| CVE-2025-58135 | 6.5 | Sep 9 | Zoom Workplace Clients for Windows - Improper Action Enforcement Affected: before 6.3.14; 6.4.0 before 6.4.12 |
| CVE-2025-49458 | 6.5 | Sep 9 | Zoom Workplace Clients - Buffer Overflow Affected: before 6.3.14; 6.4.0 before 6.4.12 |
| CVE-2025-46785 | 6.5 | May 14 | Zoom Workplace Apps for Windows - Buffer Over-read Affected: before 6.1.17; 6.1.18 before 6.2.13; 6.2.14 before 6.3.10 |
| CVE-2025-30668 | 6.5 | May 14 | Zoom Workplace Apps - NULL Pointer Dereference Affected: before 6.1.17; 6.1.18 before 6.2.13; 6.2.14 before 6.3.10 |
| CVE-2025-30667 | 6.5 | May 14 | Zoom Workplace Apps - NULL Pointer Dereference Affected: before 6.1.17; 6.1.18 before 6.2.13; 6.2.14 before 6.3.10 |
| CVE-2025-30666 | 6.5 | May 14 | Zoom Workplace Apps for Windows - NULL Pointer Dereference Affected: before 6.1.17; 6.1.18 before 6.2.13; 6.2.14 before 6.3.10 |
| CVE-2025-30665 | 6.5 | May 14 | Zoom Workplace Apps for Windows - NULL Pointer Dereference Affected: before 6.1.17; 6.1.18 before 6.2.13; 6.2.14 before 6.3.10 |
| CVE-2025-30671 | 6.5 | Apr 8 | Zoom Workplace Apps for Windows - Null Pointer Affected: before 6.1.16; 6.1.17 before 6.2.12 |
| CVE-2025-30670 | 6.5 | Apr 8 | Zoom Workplace Apps for Windows - Null Pointer Affected: before 6.1.16; 6.1.17 before 6.2.12 |
| CVE-2024-27239 | 6.5 | Feb 25 | Zoom Workplace Apps and SDKs - Divide By Zero Affected: before 5.15.17; 5.16.0 before 5.16.15; 5.16.16 before 5.17.11 |
| CVE-2024-27246 | 6.5 | Feb 25 | Zoom Workplace Apps and SDKs - Use After Free Affected: before 5.15.17; 5.16.0 before 5.16.15; 5.16.16 before 5.17.11 |
| CVE-2024-27245 | 6.5 | Feb 25 | Zoom Workplace Apps and SDKs - Buffer Overflow Affected: before 5.15.17; 5.16.0 before 5.16.15; 5.16.16 before 5.17.11 |
| CVE-2024-45426 | 6.5 | Feb 25 | Zoom Workplace Apps - Incorrect Ownership Assignment Affected: before 6.1.10 |
| CVE-2024-45425 | 6.5 | Feb 25 | Zoom Workplace Apps - Incorrect User Management Affected: before 6.1.10 |
| CVE-2025-0144 | 6.5 | Jan 30 | Zoom Workplace Apps - Out-of-bounds Write Affected: before 6.0.15; 6.0.16 before 6.1.13 |
| CVE-2024-42438 | 6.5 | Aug 14 | Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow Affected: before 5.17.14; 6.0 before 6.0.11 |
| CVE-2024-42437 | 6.5 | Aug 14 | Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow Affected: before 5.17.14; 6.0 before 6.0.11 |
| CVE-2024-42436 | 6.5 | Aug 14 | Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow Affected: before 5.17.14; 6.0 before 6.0.11 |
| CVE-2024-39818 | 6.5 | Aug 14 | Zoom Workplace Apps and SDKs - Protection Mechanism Failure Affected: before 5.17.13 |