ZO
Product
Zoom
64
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 29Low 1
Watch
Add Zoom to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-27242 | 6.8 | Apr 9 | Zoom Desktop Client for Linux - Cross Site Scripting Affected: before 5.7.10 |
| CVE-2024-27247 | 6.7 | Apr 9 | Zoom Desktop Client for macOS - Improper Privilege Management Affected: before 5.17.10 |
| CVE-2025-49464 | 6.5 | Jul 10 | Zoom Clients for Windows- Classic Buffer Overflow Affected: before 6.4.5 |
| CVE-2025-49463 | 6.5 | Jul 10 | Zoom Clients for iOS - Insufficient Control Flow Management Affected: before 6.4.5 |
| CVE-2025-46789 | 6.5 | Jul 10 | Zoom Clients for Windows - Classic Buffer Overflow Affected: All versions, or not specified |
| CVE-2024-24690 | 6.5 | Feb 14 | Zoom Clients - Improper Input Validation Affected: before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5 |
| CVE-2024-24699 | 6.5 | Feb 13 | Zoom Clients - Business Logic Error Affected: before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5 |
| CVE-2024-24696 | 6.5 | Feb 13 | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation Affected: before 5.17.0 |
| CVE-2024-24695 | 6.5 | Feb 13 | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation Affected: before 5.16.5 |
| CVE-2023-49646 | 6.5 | Dec 13 | Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access Affected: before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5; before 5.16.5 |
| CVE-2023-43585 | 6.5 | Dec 13 | Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network… Affected: before 5.16.5 |
| CVE-2023-43588 | 6.5 | Nov 15 | Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-39205 | 6.5 | Nov 14 | Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-39199 | 6.5 | Nov 14 | Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-39215 | 6.5 | Sep 12 | Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access Affected: before 5.15.5; before 5.15.5; before 5.15.5; before 5.15.5; before 5.15.5 |
| CVE-2023-39209 | 6.5 | Aug 8 | Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access Affected: before 5.15.5 |
| CVE-2023-36535 | 6.5 | Aug 8 | Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access Affected: before 5.14.10; before 5.14.10; before 5.14.10; before 5.14.10; before 5.14.10 |
| CVE-2023-34114 | 6.5 | Jun 13 | Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potentially enable information disclosure… Affected: before 5.14.10; before 5.14.10 |
| CVE-2023-28601 | 6.5 | Jun 13 | Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability Affected: before 5.14.0 |
| CVE-2023-28598 | 6.5 | Jun 13 | Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability Affected: before 5.13.10 |
| CVE-2019-13450 | 6.5 | Jul 9 | In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active Affected: through 4.4.4 |
| CVE-2019-13449 | 6.5 | Jul 9 | In the Zoom Client before 4.4.2 on macOS, remote attackers can cause a denial of service (continual focus grabs) via a sequence of invalid launch?action=join&confno= requests to… Affected: before 4.4.2 |
| CVE-2022-28755 | 6.1 | Aug 11 | The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability Affected: before 5.11.0; before 5.11.0; before 5.11.0; before 5.11.0; before 5.11.0 |
| CVE-2023-28600 | 5.4 | Jun 13 | Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability Affected: before 5.14.0 |
| CVE-2023-43583 | 4.9 | Dec 13 | Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow a privileged user to conduct a… Affected: before 5.16.0; before 5.16.0 |
| CVE-2023-39218 | 4.9 | Aug 8 | Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access Affected: before 5.14.10; before 5.14.10; before 5.14.10; before 5.14.10; before 5.14.10 |
| CVE-2024-24698 | 4.4 | Feb 13 | Zoom Clients - Improper Authentication Affected: before 5.17.0; before 5.17.0; before 5.17.0; before 5.17.0; before 5.17.0 |
| CVE-2023-28599 | 4.3 | Jun 13 | Zoom clients prior to 5.13.10 contain an HTML injection vulnerability Affected: before 5.13.10; before 5.13.10; before 5.13.10; before 5.13.10; before 5.13.10 |
| CVE-2021-28133 | 4.3 | Mar 18 | Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attempted to share the private part of their… Affected: through 5.5.4 |
Showing 29