# Zoom CVEs

> Zoom: 87 CVEs mapped to its software or packages (0 in CISA KEV), newest first, with CVSS and EPSS.

Canonical: https://rewindex.com/company/zoom/cves
Last updated: 2026-10-13T14:29:48Z

87 CVEs map to Zoom (0 in CISA KEV), newest first. Page 1. Query: `?sev=critical|high|medium|low&kev=yes|no&min_cvss=0..10&q=<text>&page=N`. Company profile: [Zoom](https://rewindex.com/company/zoom.md)
Scope: CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. A mapped CVE is not a statement that Zoom’s hosted service was exposed.
| Published (UTC) | CVE | Title | CVSS | KEV |
| --- | --- | --- | --- | --- |
| 2026-10-13 | [CVE-2026-108185](https://rewindex.com/cve/CVE-2026-108185.md) |  | 7.4 high |  |
| 2026-10-13 | [CVE-2026-108184](https://rewindex.com/cve/CVE-2026-108184.md) |  | 7.4 high |  |
| 2026-10-13 | [CVE-2026-53420](https://rewindex.com/cve/CVE-2026-53420.md) |  | 8.0 high |  |
| 2026-10-13 | [CVE-2026-53418](https://rewindex.com/cve/CVE-2026-53418.md) |  | 8.1 high |  |
| 2026-08-11 | [CVE-2026-53416](https://rewindex.com/cve/CVE-2026-53416.md) | Zoom VDI - Path Traversal | 7.1 high |  |
| 2026-08-11 | [CVE-2026-53415](https://rewindex.com/cve/CVE-2026-53415.md) | Zoom Clients - Use After Free | 8.3 high |  |
| 2026-08-11 | [CVE-2026-53414](https://rewindex.com/cve/CVE-2026-53414.md) | Zoom Clients - Buffer Over-read | 6.5 medium |  |
| 2026-08-11 | [CVE-2026-53413](https://rewindex.com/cve/CVE-2026-53413.md) | Zoom Clients - Buffer Over-write | 8.3 high |  |
| 2026-07-16 | [CVE-2026-53412](https://rewindex.com/cve/CVE-2026-53412.md) | Zoom Workplace VDI Plugin for Windows - Improper Input Validation | 9.8 critical |  |
| 2026-07-16 | [CVE-2026-53411](https://rewindex.com/cve/CVE-2026-53411.md) | Zoom Workplace VDI Plugin for Windows - Improper Input Validation | 7.8 high |  |
| 2026-07-16 | [CVE-2026-53410](https://rewindex.com/cve/CVE-2026-53410.md) | Zoom Clients for Windows - Race Condition | 7.0 high |  |
| 2026-07-16 | [CVE-2026-53409](https://rewindex.com/cve/CVE-2026-53409.md) |  | 7.8 high |  |
| 2026-06-12 | [CVE-2026-53408](https://rewindex.com/cve/CVE-2026-53408.md) |  | 8.1 high |  |
| 2026-06-12 | [CVE-2026-53407](https://rewindex.com/cve/CVE-2026-53407.md) |  | 8.1 high |  |
| 2026-06-12 | [CVE-2026-53406](https://rewindex.com/cve/CVE-2026-53406.md) |  | 7.8 high |  |
| 2026-05-13 | [CVE-2026-30906](https://rewindex.com/cve/CVE-2026-30906.md) |  | 7.8 high |  |
| 2026-05-13 | [CVE-2026-30905](https://rewindex.com/cve/CVE-2026-30905.md) |  | 7.8 high |  |
| 2026-05-13 | [CVE-2026-30904](https://rewindex.com/cve/CVE-2026-30904.md) |  | 1.8 low |  |
| 2026-03-11 | [CVE-2026-30903](https://rewindex.com/cve/CVE-2026-30903.md) |  | 9.6 critical |  |
| 2026-03-11 | [CVE-2026-30902](https://rewindex.com/cve/CVE-2026-30902.md) | Zoom Clients for Windows - Improper Privilege Management | 7.8 high |  |
| 2026-03-11 | [CVE-2026-30901](https://rewindex.com/cve/CVE-2026-30901.md) | Zoom Rooms for Windows - Improper Input Validation | 7.0 high |  |
| 2026-03-11 | [CVE-2026-30900](https://rewindex.com/cve/CVE-2026-30900.md) | Zoom Workplace Clients for Windows - Improper Check | 7.8 high |  |
| 2026-01-20 | [CVE-2026-22844](https://rewindex.com/cve/CVE-2026-22844.md) | Zoom Node Deployments - Command Injection | 9.9 critical |  |
| 2025-12-10 | [CVE-2025-67460](https://rewindex.com/cve/CVE-2025-67460.md) | Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure | 7.8 high |  |
| 2025-12-10 | [CVE-2025-67461](https://rewindex.com/cve/CVE-2025-67461.md) | Zoom Rooms for macOS - External Control of File Name or Path | 5.0 medium |  |
| 2025-11-13 | [CVE-2025-62484](https://rewindex.com/cve/CVE-2025-62484.md) | Zoom Workplace Clients - Inefficient Regular Expression Complexity | 8.1 high |  |
| 2025-11-13 | [CVE-2025-62483](https://rewindex.com/cve/CVE-2025-62483.md) | Zoom Clients - Improper Removal of Sensitive Information | 5.3 medium |  |
| 2025-11-13 | [CVE-2025-62482](https://rewindex.com/cve/CVE-2025-62482.md) | Zoom Workplace for Windows - Cross-site Scripting | 4.3 medium |  |
| 2025-11-13 | [CVE-2025-30662](https://rewindex.com/cve/CVE-2025-30662.md) | Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following | 6.6 medium |  |
| 2025-11-13 | [CVE-2025-30669](https://rewindex.com/cve/CVE-2025-30669.md) | Zoom Workplace Clients - Improper Certificate Validation | 4.8 medium |  |
| 2025-11-13 | [CVE-2025-64741](https://rewindex.com/cve/CVE-2025-64741.md) | Zoom Workplace for Android - Improper Authorization Handling | 8.1 high |  |
| 2025-11-13 | [CVE-2025-64740](https://rewindex.com/cve/CVE-2025-64740.md) | Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature | 7.5 high |  |
| 2025-11-13 | [CVE-2025-64739](https://rewindex.com/cve/CVE-2025-64739.md) | Zoom Clients - External Control of File Name or Path | 4.3 medium |  |
| 2025-11-13 | [CVE-2025-64738](https://rewindex.com/cve/CVE-2025-64738.md) | Zoom Workplace for macOS - External Control of File Name or Path | 5.0 medium |  |
| 2025-10-15 | [CVE-2025-58133](https://rewindex.com/cve/CVE-2025-58133.md) | Zoom Rooms Clients - Authentication Bypass | 5.3 medium |  |
| 2025-10-15 | [CVE-2025-58132](https://rewindex.com/cve/CVE-2025-58132.md) | Zoom Clients for Windows - Command Injection | 4.1 medium |  |
| 2025-09-09 | [CVE-2025-58131](https://rewindex.com/cve/CVE-2025-58131.md) | Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race Condition | 6.6 medium |  |
| 2025-09-09 | [CVE-2025-58135](https://rewindex.com/cve/CVE-2025-58135.md) | Zoom Workplace Clients for Windows - Improper Action Enforcement | 5.3 medium |  |
| 2025-09-09 | [CVE-2025-58134](https://rewindex.com/cve/CVE-2025-58134.md) | Zoom Workplace Clients for Windows - Incorrect Authorization | 4.3 medium |  |
| 2025-09-09 | [CVE-2025-49461](https://rewindex.com/cve/CVE-2025-49461.md) | Zoom Workplace Clients - Cross-site Scripting | 4.3 medium |  |
| 2025-09-09 | [CVE-2025-49460](https://rewindex.com/cve/CVE-2025-49460.md) | Zoom Workplace Clients - Argument Injection | 4.3 medium |  |
| 2025-09-09 | [CVE-2025-49459](https://rewindex.com/cve/CVE-2025-49459.md) | Zoom Workplace for Windows on ARM  - Missing Authorization | 7.8 high |  |
| 2025-09-09 | [CVE-2025-49458](https://rewindex.com/cve/CVE-2025-49458.md) | Zoom Workplace Clients - Buffer Overflow | 6.5 medium |  |
| 2025-08-12 | [CVE-2025-49457](https://rewindex.com/cve/CVE-2025-49457.md) | Zoom Clients for Windows - Untrusted Search Path | 9.6 critical |  |
| 2025-08-12 | [CVE-2025-49456](https://rewindex.com/cve/CVE-2025-49456.md) | Zoom Clients for Windows- Race Condition | 6.2 medium |  |
| 2025-07-10 | [CVE-2025-49464](https://rewindex.com/cve/CVE-2025-49464.md) | Zoom Clients for Windows- Classic Buffer Overflow | 6.5 medium |  |
| 2025-07-10 | [CVE-2025-49463](https://rewindex.com/cve/CVE-2025-49463.md) | Zoom Clients  for iOS - Insufficient Control Flow Management | 6.5 medium |  |
| 2025-07-10 | [CVE-2025-49462](https://rewindex.com/cve/CVE-2025-49462.md) | Zoom Clients - Cross-site Scripting | 3.5 low |  |
| 2025-07-10 | [CVE-2025-46789](https://rewindex.com/cve/CVE-2025-46789.md) | Zoom Clients for Windows - Classic Buffer Overflow | 6.5 medium |  |
| 2025-07-10 | [CVE-2025-46788](https://rewindex.com/cve/CVE-2025-46788.md) | Zoom Workplace for Linux - Improper Certificate Validation | 7.4 high |  |

Next page: [page 2](https://rewindex.com/company/zoom/cves.md?page=2)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


## Charts

### Chart data: CVEs per week, last 52 weeks (Zoom)
Weeks start Monday, UTC. Bars: CVEs by published date (KEV date added if unpublished), by CVSS severity; kev_added: entries added to CISA KEV that week. Same filters as the list. The current week is partial.

| Week of (UTC) | Critical | High | Medium | Low | Not scored | Added to KEV |
| --- | --- | --- | --- | --- | --- | --- |
| 2025-11-03 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-11-10 | 0 | 3 | 6 | 0 | 0 | 0 |
| 2025-11-17 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-11-24 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-12-01 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-12-08 | 0 | 1 | 1 | 0 | 0 | 0 |
| 2025-12-15 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-12-22 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-12-29 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-01-05 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-01-12 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-01-19 | 1 | 0 | 0 | 0 | 0 | 0 |
| 2026-01-26 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-02-02 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-02-09 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-02-16 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-02-23 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-03-02 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-03-09 | 1 | 3 | 0 | 0 | 0 | 0 |
| 2026-03-16 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-03-23 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-03-30 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-04-06 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-04-13 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-04-20 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-04-27 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-05-04 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-05-11 | 0 | 2 | 0 | 1 | 0 | 0 |
| 2026-05-18 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-05-25 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-06-01 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-06-08 | 0 | 3 | 0 | 0 | 0 | 0 |
| 2026-06-15 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-06-22 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-06-29 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-07-06 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-07-13 | 1 | 3 | 0 | 0 | 0 | 0 |
| 2026-07-20 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-07-27 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-08-03 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-08-10 | 0 | 3 | 1 | 0 | 0 | 0 |
| 2026-08-17 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-08-24 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-08-31 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-07 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-14 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-21 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-28 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-10-05 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-10-12 | 0 | 4 | 0 | 0 | 0 | 0 |
| 2026-10-19 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-10-26 | 0 | 0 | 0 | 0 | 0 | 0 |

---
Canonical: https://rewindex.com/company/zoom/cves · Markdown: https://rewindex.com/company/zoom/cves.md · JSON: https://rewindex.com/api/v1/companies/zoom/cves · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:12:09.944Z
