ZO
Product
Zoom
64
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 29Low 1
Watch
Add Zoom to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-24691 | 9.8 | Feb 14 | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation Affected: before 5.16.5 |
| CVE-2023-39213 | 9.8 | Aug 8 | Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of… Affected: before 5.15.2 |
| CVE-2023-39216 | 9.8 | Aug 8 | Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access Affected: before 5.14.7 |
| CVE-2023-36534 | 9.8 | Aug 8 | Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access Affected: before 5.14.7 |
| CVE-2020-6109 | 9.8 | Jun 8 | An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs Affected: 4.6.10 |
| CVE-2018-15715 | 9.8 | Nov 30 | Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to unauthorized message… Affected: through 2.4.129780.0915; before 4.1.34801.1116; before 4.1.34814.1119 |
| CVE-2023-43586 | 8.8 | Dec 13 | Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via… Affected: before 5.16.5 |
| CVE-2023-43582 | 8.8 | Nov 14 | Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-36541 | 8.8 | Aug 8 | Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network… Affected: before 5.14.5 |
| CVE-2023-34116 | 8.8 | Jul 11 | Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access Affected: before 5.15.0 |
| CVE-2023-34121 | 8.8 | Jun 13 | Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an… Affected: before 5.14.0 |
| CVE-2020-6110 | 8.8 | Jun 8 | An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets Affected: 4.6.10 |
| CVE-2019-13567 | 8.8 | Jul 12 | The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450 Affected: before 4.4.53932.0709 |
| CVE-2017-15049 | 8.8 | Dec 19 | The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers… Affected: before 2.0.115900.1201 |
| CVE-2017-15048 | 8.8 | Dec 19 | Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the… Affected: before 2.0.115900.1201 |
| CVE-2023-39214 | 8.1 | Aug 8 | Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access Affected: before 5.15.5; before 5.15.5; before 5.15.5; before 5.15.5; before 5.15.5 |
| CVE-2024-27240 | 7.8 | Jul 15 | Zoom Apps for Windows - Improper Input Validation Affected: before 6.0.0 |
| CVE-2024-24694 | 7.8 | Apr 9 | Zoom Desktop Client for Windows - Improper Privilege Management Affected: before 5.7.10 |
| CVE-2024-24697 | 7.8 | Feb 13 | Zoom Clients - Untrusted Search Path Affected: before 5.17.0 |
| CVE-2023-49647 | 7.8 | Jan 12 | Zoom Desktop Client for Windows - Improper Access Control Affected: before 5.16.10 |
| CVE-2023-39211 | 7.8 | Aug 8 | Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via… Affected: before 5.15.5 |
| CVE-2023-36540 | 7.8 | Aug 8 | Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access Affected: before 5.14.5 |
| CVE-2023-28602 | 7.7 | Jun 13 | Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability Affected: before 5.13.5 |
| CVE-2023-39206 | 7.5 | Nov 14 | Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-39204 | 7.5 | Nov 14 | Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access Affected: before 5.15.10; before 5.15.10; before 5.15.10; before 5.15.10; before 5.15.10 |
| CVE-2023-39203 | 7.5 | Nov 14 | Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of… Affected: before 5.16.0 |
| CVE-2023-39208 | 7.5 | Sep 12 | Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of service via network access Affected: before 5.15.10 |
| CVE-2023-36532 | 7.5 | Aug 8 | Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access Affected: before 5.14.5; before 5.14.5; before 5.14.5; before 5.14.5; before 5.14.5 |
| CVE-2023-36539 | 7.5 | Jun 30 | Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information Affected: 5.15.0; 5.15.0; 5.15.0; 5.15.0; 5.15.0; 5.15.1 |
| CVE-2023-28597 | 7.5 | Mar 27 | Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability Affected: before 5.13.5; before 5.13.5; before 5.13.5; before 5.13.5; before 5.13.5 |
| CVE-2023-22882 | 7.5 | Mar 16 | Zoom clients before version 5.13.5 contain a STUN parsing vulnerability Affected: before 5.13.5 |
| CVE-2023-22881 | 7.5 | Mar 16 | Zoom clients before version 5.13.5 contain a STUN parsing vulnerability Affected: before 5.13.5 |
| CVE-2023-22880 | 7.5 | Mar 16 | Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information… Affected: before 5.13.3 |
| CVE-2022-36928 | 7.1 | Jan 9 | Zoom for Android clients before version 5.13.0 contain a path traversal vulnerability Affected: before 5.13.0 |
| CVE-2024-27242 | 6.8 | Apr 9 | Zoom Desktop Client for Linux - Cross Site Scripting Affected: before 5.7.10 |
| CVE-2024-27247 | 6.7 | Apr 9 | Zoom Desktop Client for macOS - Improper Privilege Management Affected: before 5.17.10 |
| CVE-2025-49464 | 6.5 | Jul 10 | Zoom Clients for Windows- Classic Buffer Overflow Affected: before 6.4.5 |
| CVE-2025-49463 | 6.5 | Jul 10 | Zoom Clients for iOS - Insufficient Control Flow Management Affected: before 6.4.5 |
| CVE-2025-46789 | 6.5 | Jul 10 | Zoom Clients for Windows - Classic Buffer Overflow Affected: All versions, or not specified |
| CVE-2024-24690 | 6.5 | Feb 14 | Zoom Clients - Improper Input Validation Affected: before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5 |
| CVE-2024-24699 | 6.5 | Feb 13 | Zoom Clients - Business Logic Error Affected: before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5 |
| CVE-2024-24696 | 6.5 | Feb 13 | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation Affected: before 5.17.0 |
| CVE-2024-24695 | 6.5 | Feb 13 | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation Affected: before 5.16.5 |
| CVE-2023-49646 | 6.5 | Dec 13 | Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access Affected: before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5 |
| CVE-2023-43585 | 6.5 | Dec 13 | Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network… Affected: before 5.16.5 |
| CVE-2023-43588 | 6.5 | Nov 14 | Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-39199 | 6.5 | Nov 14 | Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-39205 | 6.5 | Nov 14 | Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-39215 | 6.5 | Sep 12 | Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access Affected: before 5.15.5; before 5.15.5; before 5.15.5; before 5.15.5; before 5.15.5 |
| CVE-2023-39209 | 6.5 | Aug 8 | Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access Affected: before 5.15.5 |