CVEs we hold for Zoom

Records whose assigning authority named Zoom as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-53416Zoom VDI - Path TraversalZoom VDI

CVE-2026-53415Zoom Clients - Use After FreeZoom Clients

CVE-2026-53414Zoom Clients - Buffer Over-readZoom Clients

CVE-2026-53413Zoom Clients - Buffer Over-writeZoom Clients

CVE-2026-53412Zoom Workplace VDI Plugin for Windows - Improper Input ValidationZoom Workplace for Windows

CVE-2026-53411Zoom Workplace VDI Plugin for Windows - Improper Input ValidationZoom Workplace VDI Plugin

CVE-2026-53410Zoom Clients for Windows - Race ConditionZoom Clients

CVE-2026-53409no title heldZoom Rooms

CVE-2026-53408no title heldZoom Workplace

CVE-2026-53407no title heldZoom Workplace

CVE-2026-53406no title heldZoom Contact Center

CVE-2026-30906no title heldZoom Rooms

CVE-2026-30905no title heldZoom Workplace VDI Plugin

CVE-2026-30904no title heldZoom Workplace

CVE-2026-30903no title heldZoom Workplace

CVE-2026-30902Zoom Clients for Windows - Improper Privilege ManagementZoom Workplace

CVE-2026-30901Zoom Rooms for Windows - Improper Input ValidationZoom Rooms

CVE-2026-30900Zoom Workplace Clients for Windows - Improper CheckZoom Workplace

CVE-2026-22844Zoom Node Deployments - Command InjectionZoom Node

CVE-2025-67461Zoom Rooms for macOS - External Control of File Name or PathZoom Rooms

CVE-2025-67460Zoom Rooms for Windows - Software Downgrade Protection Mechanism FailureZoom Rooms

CVE-2025-64741Zoom Workplace for Android - Improper Authorization HandlingZoom Workplace for Android

CVE-2025-64740Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic SignatureZoom Workplace VDI Client

CVE-2025-64739Zoom Clients - External Control of File Name or PathZoom Clients

CVE-2025-64738Zoom Workplace for macOS - External Control of File Name or PathZoom Workplace for macOS

CVE-2025-62484Zoom Workplace Clients - Inefficient Regular Expression ComplexityZoom Workplace

CVE-2025-62483Zoom Clients - Improper Removal of Sensitive InformationZoom Clients

CVE-2025-62482Zoom Workplace for Windows - Cross-site ScriptingZoom Workplace

CVE-2025-58135Zoom Workplace Clients for Windows - Improper Action EnforcementZoom Workplace Clients for Windows

CVE-2025-58134Zoom Workplace Clients for Windows - Incorrect AuthorizationZoom Workplace Clients for Windows

CVE-2025-58133Zoom Rooms Clients - Authentication BypassZoom Rooms

CVE-2025-58132Zoom Clients for Windows - Command InjectionZoom Clients for Windows

CVE-2025-58131Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race ConditionZoom Workplace VDI Plugin macOS Universal installer for…

CVE-2025-49464Zoom Clients for Windows- Classic Buffer OverflowZoom Clients for Windows

CVE-2025-49463Zoom Clients for iOS - Insufficient Control Flow ManagementZoom Clients for iOS

CVE-2025-49462Zoom Clients - Cross-site ScriptingZoom Clients

CVE-2025-49461Zoom Workplace Clients - Cross-site ScriptingZoom Workplace Clients

CVE-2025-49460Zoom Workplace Clients - Argument InjectionZoom Workplace Clients

CVE-2025-49459Zoom Workplace for Windows on ARM - Missing AuthorizationZoom Workplace for Windows on ARM

CVE-2025-49458Zoom Workplace Clients - Buffer OverflowZoom Workplace Clients

CVE-2025-49457Zoom Clients for Windows - Untrusted Search PathZoom Clients for Windows

CVE-2025-49456Zoom Clients for Windows- Race ConditionZoom Clients for Windows

CVE-2025-49049WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerabilityZoomIt DZS Video Gallery

CVE-2025-47568WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerabilityZoomIt ZoomSounds

CVE-2025-47566WordPress ZoomSounds plugin <= 6.91 - Reflected Cross Site Scripting (XSS) vulnerabilityZoomSounds

CVE-2025-46789Zoom Clients for Windows - Classic Buffer OverflowZoom Clients for Windows

CVE-2025-46788Zoom Workplace for Linux - Improper Certificate ValidationZoom Workplace for Linux

CVE-2025-46786Zoom Workplace Apps - Cross-site ScriptingZoom Workplace Apps

CVE-2025-46785Zoom Workplace Apps for Windows - Buffer Over-readZoom Workplace Apps

CVE-2025-3431ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File DownloadZoomIt ZoomSounds - WordPress Wave Audio Player with…

CVE-2025-30671Zoom Workplace Apps for Windows - Null PointerZoom Workplace Apps for Windows

CVE-2025-30670Zoom Workplace Apps for Windows - Null PointerZoom Workplace Apps for Windows

CVE-2025-30669Zoom Workplace Clients - Improper Certificate ValidationZoom Workplace Clients

CVE-2025-30668Zoom Workplace Apps - NULL Pointer DereferenceZoom Workplace Apps

CVE-2025-30667Zoom Workplace Apps - NULL Pointer DereferenceZoom Workplace Apps

CVE-2025-30666Zoom Workplace Apps for Windows - NULL Pointer DereferenceZoom Workplace Apps for Windows

CVE-2025-30665Zoom Workplace Apps for Windows - NULL Pointer DereferenceZoom Workplace Apps for Windows

CVE-2025-30664Zoom Workplace Apps - Cross-site ScriptingZoom Workplace Apps

CVE-2025-30663Zoom Workplace Apps - Time-of-check Time-of-useZoom Workplace Apps

CVE-2025-30662Zoom Workplace VDI Plugin macOS Universal Installer - Symlink FollowingZoom Workplace VDI Plugin macOS Universal installer

CVE-2025-29014WordPress FoodMenu <= 1.20 - Cross Site Scripting (XSS) VulnerabilityZoomIt FoodMenu

CVE-2025-29001WordPress WooCommerce Shop Page Builder plugin <= 2.27.7 - Broken Access Control VulnerabilityZoomIt WooCommerce Shop Page Builder

CVE-2025-28999WordPress WooCommerce Shop Page Builder <= 2.27.7 - Cross Site Scripting (XSS) VulnerabilityZoomIt WooCommerce Shop Page Builder

CVE-2025-27443Zoom Workplace Apps for Windows - Insecure Default Variable InitializationZoom Workplace Apps for Windows

CVE-2025-27442Zoom Workplace Apps - Cross Site ScriptingZoom Workplace Apps

CVE-2025-27441Zoom Workplace Apps - Cross Site ScriptingZoom Workplace Apps

CVE-2025-27440Zoom Apps - Heap-based Buffer OverflowZoom Workplace Apps

CVE-2025-27439Zoom Apps - Buffer UnderflowZoom Workplace Apps

CVE-2025-0839ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeZoomIt ZoomSounds - WordPress Wave Audio Player with…

CVE-2025-0151Zoom Apps - Use After FreeZoom Workplace Apps

CVE-2025-0150Zoom Workplace Apps for iOS - Incorrect Behavior OrderZoom Workplace Apps for iOS

CVE-2025-0149Zoom Apps - Insufficient Verification of Data AuthenticityZoom Apps

CVE-2025-0148Zoom Jenkins Marketplace plugin - Missing Password Field MaskingZoom Jenkins Marketplace plugin

CVE-2025-0147Zoom Workplace App for Linux - Type ConfusionZoom Workplace App for Linux

CVE-2025-0146Zoom Workplace app for macOS - Symlink FollowingZoom Workplace app for macOS

CVE-2025-0145Zoom Workplace Apps for Windows - Untrusted Search PathZoom Workplace Apps for Windows

CVE-2025-0144Zoom Workplace Apps - Out-of-bounds WriteZoom Workplace Apps

CVE-2025-0143Zoom Workplace Apps for Linux - Out-of-bounds WriteZoom Workplace Apps for Linux

CVE-2025-0142Zoom Jenkins Marketplace plugin - Cleartext Storage of Sensitive InformationZoom Jenkins Marketplace plugin

CVE-2024-45426Zoom Workplace Apps - Incorrect Ownership AssignmentZoom Workplace Apps

CVE-2024-45425Zoom Workplace Apps - Incorrect User ManagementZoom Workplace Apps

CVE-2024-45424Zoom Workplace Apps - Business Logic ErrorZoom Workplace Apps

CVE-2024-45422Zoom Apps - Improper Input ValidationZoom Workplace Apps, SDKs, Rooms Clients, and Rooms…

CVE-2024-45421Zoom Apps - Buffer OverflowZoom Apps

CVE-2024-45420Zoom Apps - Uncontrolled Resource ConsumptionZoom Workplace Apps, SDKs, Rooms Clients, and Rooms…

CVE-2024-45419Zoom Apps - Improper Input ValidationZoom Workplace Apps, SDKs, Rooms Clients, and Rooms…

CVE-2024-45418Zoom Apps for macOS - Symbolic Link FollowingZoom Apps for macOS

CVE-2024-45417Zoom Apps for macOS - Uncontrolled Resource ConsumptionZoom Apps for macOS

CVE-2024-42441Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Incorrect Privilege…Zoom Rooms Client for macOS

CVE-2024-42440Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Improper Privilege…Zoom Rooms Client for macOS

CVE-2024-42439Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search PathZoom Meeting SDK for macOS

CVE-2024-42438Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer OverflowZoom Workplace Apps, SDKs, Rooms Clients, and Rooms…

CVE-2024-42437Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer OverflowZoom Workplace Apps, SDKs, Rooms Clients, and Rooms…

CVE-2024-42436Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer OverflowZoom Workplace Apps, SDKs, Rooms Clients, and Rooms…

CVE-2024-42435Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information ExposureZoom Workplace Apps, SDKs, Rooms Clients, and Rooms…

CVE-2024-42434Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing AuthorizationZoom Workplace Apps, SDKs, Rooms Clients, and Rooms…

CVE-2024-39827Zoom Workplace Desktop App for Windows - Improper Input ValidationZoom Workplace Desktop App for Windows

CVE-2024-39826Zoom Workplace Apps and SDKs - Path traversalZoom Workplace Apps and SDKs

CVE-2024-39825Zoom Workplace Apps and Rooms Clients - Buffer OverflowZoom Workplace Apps and Rooms Clients

CVE-2024-39824Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing AuthorizationZoom Workplace Apps, SDKs, Rooms Clients, and Rooms…

CVE-2024-39823Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing AuthorizationZoom Workplace Apps, SDKs, Rooms Clients, and Rooms…

CVE-2024-39822Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information ExposureZoom Workplace Apps, SDKs, Rooms Clients, and Rooms…

CVE-2024-39821Zoom Workplace App for Windows and Zoom Rooms App for Windows - Race ConditionZoom Rooms App for Windows

CVE-2024-39820Zoom Workplace Desktop App for macOS - Uncontrolled Search Path ElementZoom Workplace Desktop App for macOS

CVE-2024-39819Zoom Workplace Apps and SDK for Windows - Improper Privilege ManagementZoom Workplace Apps and SDK for Windows

CVE-2024-39818Zoom Workplace Apps and SDKs - Protection Mechanism FailureZoom Workplace Apps and SDKs

CVE-2024-27247Zoom Desktop Client for macOS - Improper Privilege ManagementZoom Desktop Client for macOS

CVE-2024-27246Zoom Workplace Apps and SDKs - Use After FreeZoom Workplace Apps and SDKs

CVE-2024-27245Zoom Workplace Apps and SDKs - Buffer OverflowZoom Workplace Apps and SDKs

CVE-2024-27244Zoom Workplace VDI App for Windows - Insufficient Verification of Data AuthenticityZoom Workplace VDI App for Windows

CVE-2024-27243Zoom Apps - Buffer OverflowZoom Video Communications, Inc. see references

CVE-2024-27242Zoom Desktop Client for Linux - Cross Site ScriptingZoom Desktop Client for Linux

CVE-2024-27241Zoom Apps and SDKs - Improper Input ValidationZoom Apps and SDKs

CVE-2024-27240Zoom Apps for Windows - Improper Input ValidationZoom Apps for Windows

CVE-2024-27239Zoom Workplace Apps and SDKs - Divide By ZeroZoom Workplace Apps and SDKs

CVE-2024-27238Zoom Apps and SDKs - Race ConditionZoom Apps and SDKs

CVE-2024-24699Zoom Clients - Business Logic ErrorZoom Clients

CVE-2024-24698Zoom Clients - Improper AuthenticationZoom Clients

CVE-2024-24697Zoom Clients - Untrusted Search PathZoom Clients

CVE-2024-24696Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input…Zoom Meeting SDK for Windows

CVE-2024-24695Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input…Zoom Meeting SDK for Windows

CVE-2024-24694Zoom Desktop Client for Windows - Improper Privilege ManagementZoom Desktop Client for Windows

CVE-2024-24693Zoom Rooms Client for Windows - Improper Access ControlZoom Rooms Client for Windows

CVE-2024-24692Zoom Rooms Client for Windows - Race ConditionZoom Rooms Client for Windows

CVE-2024-24691Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input…Zoom Meeting SDK for Windows

CVE-2024-24690Zoom Clients - Improper Input ValidationZoom Clients

CVE-2024-13777ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object InjectionZoomIt ZoomSounds - WordPress Wave Audio Player with…

CVE-2024-13776ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+)…ZoomIt ZoomSounds - WordPress Wave Audio Player with…

CVE-2023-49647Zoom Desktop Client for Windows - Improper Access ControlZoom SDKs for Windows before version 5.16.10

CVE-2023-49646no title heldZoom Clients

CVE-2023-43591no title heldZoom Rooms for macOS

CVE-2023-43590no title heldZoom Rooms for macOS

CVE-2023-43588no title heldZoom Clients

CVE-2023-43586no title heldZoom SDKs for Windows

CVE-2023-43585no title heldZoom Mobile App for iOS and SDKs for iOS

CVE-2023-43583no title heldZoom SDK

CVE-2023-43582no title heldZoom Clients

CVE-2023-39218no title heldZoom Clients

CVE-2023-39217no title heldZoom SDK's

CVE-2023-39216no title heldZoom Desktop Client for Windows

CVE-2023-39215no title heldZoom Clients

CVE-2023-39214no title heldZoom SDK's

CVE-2023-39213no title heldZoom VDI Client

CVE-2023-39212no title heldZoom Rooms for Windows

CVE-2023-39211no title heldZoom Rooms for Windows

CVE-2023-39210no title heldZoom Client SDK for Windows

CVE-2023-39209no title heldZoom Desktop Client for Windows

CVE-2023-39208no title heldZoom Desktop Client for Linux

CVE-2023-39206no title heldZoom Clients

CVE-2023-39205no title heldZoom Clients

CVE-2023-39204no title heldZoom Clients

CVE-2023-39203no title heldZoom VDI Client

CVE-2023-39202no title heldZoom VDI Client

CVE-2023-39201no title heldZoom Video Communications, Inc. CleanZoom

CVE-2023-39199no title heldZoom Clients

CVE-2023-36541no title heldZoom Desktop Client for Windows

CVE-2023-36540no title heldZoom Desktop Client for Windows

CVE-2023-36539no title heldZoom clients

CVE-2023-36538no title heldZoom Rooms for Windows

CVE-2023-36537no title heldZoom Rooms for Windows

CVE-2023-36536no title heldZoom Rooms for Windows

CVE-2023-36535no title heldZoom Clients

CVE-2023-36534no title heldZoom Desktop Client for Windows

CVE-2023-36533no title heldZoom SDK's

CVE-2023-36532no title heldZoom Clients

CVE-2023-34121no title heldZoom VDI for Windows Meeting Clients

CVE-2023-34120no title heldZoom VDI for Windows Meeting Clients

CVE-2023-34119no title heldZoom Rooms for Windows

CVE-2023-34118no title heldZoom Rooms for Windows

CVE-2023-34117no title heldZoom Client SDK

CVE-2023-34116no title heldZoom Desktop Client for Windows

CVE-2023-34115no title heldZoom Meeting SDK

CVE-2023-34114no title heldZoom for MacOS Client

CVE-2023-28603no title heldZoom VDI Windows Meeting Client

CVE-2023-28602no title heldZoom for Windows Client

CVE-2023-28601no title heldZoom for Windows Client

CVE-2023-28600no title heldZoom for macOS Client

CVE-2023-28599no title heldZoom for Windows

CVE-2023-28598no title heldZoom for Linux clients

CVE-2023-28597Improper trust boundary implementation for SMB in Zoom ClientsZoom VDI for Windows

CVE-2023-28596Local Privilege Escalation in Zoom for macOS InstallersZoom Client for Meetings for IT Admin macOS installers

CVE-2023-22883Local Privilege Escalation in Zoom for Windows InstallersZoom Client for Meetings for IT Admin Windows installers

CVE-2023-22882Denial of Service in Zoom ClientsZoom (for Android, iOS, Linux, macOS, and Windows) clients…

CVE-2023-22881Denial of Service in Zoom ClientsZoom (for Android, iOS, Linux, macOS, and Windows) clients…

CVE-2023-22880Information Disclosure in Zoom for Windows ClientsZoom VDI for Windows

CVE-2022-36930Local Privilege Escalation in Zoom Rooms for Windows InstallersZoom Rooms for Windows

CVE-2022-36929Local Privilege Escalation in Zoom Rooms for Windows ClientsZoom Rooms for Windows

CVE-2022-36928Path Traversal in Zoom for Android ClientsZoom for Android

CVE-2022-36927Local Privilege Escalation in Zoom Rooms for macOS ClientsZoom Rooms for macOS

CVE-2022-36926Local Privilege Escalation in Zoom Rooms for macOS ClientsZoom Rooms for macOS

CVE-2022-36925Insecure key generation for Zoom Rooms for macOS ClientsZoom Rooms for macOS

CVE-2022-36924Local Privilege Escalation in Zoom Rooms Installer for WindowsZoom Rooms Installer for Windows

CVE-2022-28768Local Privilege Escalation in Zoom Client Installer for macOSZoom Client for Meetings Installer for macOS (Standard and…

CVE-2022-28766DLL injection in Zoom Windows ClientsZoom Rooms for Conference Room for Windows (32-bit)

CVE-2022-28764Local information exposure in Zoom ClientsZoom Rooms for Conference Room (for Android, iOS, Linux…

CVE-2022-28763Improper URL parsing in Zoom ClientsZoom Rooms for Conference Room (for Android, iOS, Linux…

CVE-2022-28762Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOSZoom Client for Meetings for MacOS

CVE-2022-28761Zoom On-Premise Deployments: Improper Access ControlZoom On-Premise Meeting Connector MMR

CVE-2022-28760Zoom On-Premise Deployments: Improper Access ControlZoom On-Premise Meeting Connector MMR

CVE-2022-28759Zoom On-Premise Deployments: Improper Access ControlZoom On-Premise Meeting Connector MMR

200 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.