Zoom CVEs
87 vulnerabilities mapped to Zoom’s software or packages, 0 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first. Not a statement that the hosted service was exposed.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVSS 7.4 highEPSS 0.21%
CVSS 7.4 highEPSS 0.20%
CVSS 8.0 highEPSS 0.32%
CVSS 8.1 highEPSS 0.30%
CVE-2026-53416 Zoom VDI - Path Traversal
CVSS 7.1 highEPSS 0.21%
CVE-2026-53415 Zoom Clients - Use After Free
CVSS 8.3 highEPSS 0.49%
CVE-2026-53414 Zoom Clients - Buffer Over-read
CVSS 6.5 mediumEPSS 0.36%
CVE-2026-53413 Zoom Clients - Buffer Over-write
CVSS 8.3 highEPSS 0.49%
CVE-2026-53412 Zoom Workplace VDI Plugin for Windows - Improper Input Validation
CVSS 9.8 criticalEPSS 0.53%
CVE-2026-53411 Zoom Workplace VDI Plugin for Windows - Improper Input Validation
CVSS 7.8 highEPSS 0.14%
CVE-2026-53410 Zoom Clients for Windows - Race Condition
CVSS 7.0 highEPSS 0.10%
CVSS 7.8 highEPSS 0.17%
CVSS 8.1 highEPSS 0.21%
CVSS 8.1 highEPSS 0.23%
CVSS 7.8 highEPSS 0.08%
CVSS 7.8 highEPSS 0.12%
CVSS 7.8 highEPSS 0.12%
CVSS 1.8 lowEPSS 0.14%
CVSS 9.6 criticalEPSS 0.33%
CVE-2026-30902 Zoom Clients for Windows - Improper Privilege Management
CVSS 7.8 highEPSS 0.12%
CVE-2026-30901 Zoom Rooms for Windows - Improper Input Validation
CVSS 7.0 highEPSS 0.12%
CVE-2026-30900 Zoom Workplace Clients for Windows - Improper Check
CVSS 7.8 highEPSS 0.13%
CVE-2026-22844 Zoom Node Deployments - Command Injection
CVSS 9.9 criticalEPSS 13.5%
CVE-2025-67460 Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure
CVSS 7.8 highEPSS 0.16%
CVE-2025-67461 Zoom Rooms for macOS - External Control of File Name or Path
CVSS 5.0 mediumEPSS 0.14%
CVE-2025-62484 Zoom Workplace Clients - Inefficient Regular Expression Complexity
CVSS 8.1 highEPSS 0.32%
CVE-2025-62483 Zoom Clients - Improper Removal of Sensitive Information
CVSS 5.3 mediumEPSS 0.29%
CVE-2025-62482 Zoom Workplace for Windows - Cross-site Scripting
CVSS 4.3 mediumEPSS 0.21%
CVE-2025-30662 Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following
CVSS 6.6 mediumEPSS 0.14%
CVE-2025-30669 Zoom Workplace Clients - Improper Certificate Validation
CVSS 4.8 mediumEPSS 0.11%
CVE-2025-64741 Zoom Workplace for Android - Improper Authorization Handling
CVSS 8.1 highEPSS 0.44%
CVE-2025-64739 Zoom Clients - External Control of File Name or Path
CVSS 4.3 mediumEPSS 0.33%
CVE-2025-64738 Zoom Workplace for macOS - External Control of File Name or Path
CVSS 5.0 mediumEPSS 0.16%
CVE-2025-58133 Zoom Rooms Clients - Authentication Bypass
CVSS 5.3 mediumEPSS 0.28%
CVE-2025-58132 Zoom Clients for Windows - Command Injection
CVSS 4.1 mediumEPSS 1.8%
CVE-2025-58131 Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race Condition
CVSS 6.6 mediumEPSS 0.11%
CVE-2025-58135 Zoom Workplace Clients for Windows - Improper Action Enforcement
CVSS 5.3 mediumEPSS 0.26%
CVE-2025-58134 Zoom Workplace Clients for Windows - Incorrect Authorization
CVSS 4.3 mediumEPSS 0.21%
CVE-2025-49461 Zoom Workplace Clients - Cross-site Scripting
CVSS 4.3 mediumEPSS 0.31%
CVE-2025-49460 Zoom Workplace Clients - Argument Injection
CVSS 4.3 mediumEPSS 0.27%
CVE-2025-49459 Zoom Workplace for Windows on ARM - Missing Authorization
CVSS 7.8 highEPSS 0.15%
CVE-2025-49458 Zoom Workplace Clients - Buffer Overflow
CVSS 6.5 mediumEPSS 0.32%
CVE-2025-49457 Zoom Clients for Windows - Untrusted Search Path
CVSS 9.6 criticalEPSS 0.62%
CVE-2025-49456 Zoom Clients for Windows- Race Condition
CVSS 6.2 mediumEPSS 0.11%
CVE-2025-49464 Zoom Clients for Windows- Classic Buffer Overflow
CVSS 6.5 mediumEPSS 0.69%
CVE-2025-49463 Zoom Clients for iOS - Insufficient Control Flow Management
CVSS 6.5 mediumEPSS 0.49%
CVE-2025-49462 Zoom Clients - Cross-site Scripting
CVSS 3.5 lowEPSS 0.25%
CVE-2025-46789 Zoom Clients for Windows - Classic Buffer Overflow
CVSS 6.5 mediumEPSS 0.55%
CVE-2025-46788 Zoom Workplace for Linux - Improper Certificate Validation
CVSS 7.4 highEPSS 0.28%
All vendors’ CVEs · JSON · Markdown
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)