Zoom CVEs
87 vulnerabilities mapped to Zoom’s software or packages, 0 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first. Not a statement that the hosted service was exposed.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-46786 Zoom Workplace Apps - Cross-site Scripting
CVSS 4.3 mediumEPSS 0.31%
CVE-2025-46785 Zoom Workplace Apps for Windows - Buffer Over-read
CVSS 6.5 mediumEPSS 0.58%
CVE-2025-30668 Zoom Workplace Apps - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%
CVE-2025-30667 Zoom Workplace Apps - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%
CVE-2025-30666 Zoom Workplace Apps for Windows - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%
CVE-2025-30665 Zoom Workplace Apps for Windows - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%
CVE-2025-30664 Zoom Workplace Apps - Cross-site Scripting
CVSS 6.6 mediumEPSS 0.27%
CVE-2025-30663 Zoom Workplace Apps - Time-of-check Time-of-use
CVSS 8.8 highEPSS 0.15%
CVE-2025-30671 Zoom Workplace Apps for Windows - Null Pointer
CVSS 6.5 mediumEPSS 0.41%
CVE-2025-30670 Zoom Workplace Apps for Windows - Null Pointer
CVSS 6.5 mediumEPSS 0.42%
CVE-2025-27443 Zoom Workplace Apps for Windows - Insecure Default Variable Initialization
CVSS 2.8 lowEPSS 0.16%
CVE-2025-27442 Zoom Workplace Apps - Cross Site Scripting
CVSS 4.6 mediumEPSS 0.24%
CVE-2025-27441 Zoom Workplace Apps - Cross Site Scripting
CVSS 4.6 mediumEPSS 0.25%
CVE-2025-27440 Zoom Apps - Heap-based Buffer Overflow
CVSS 8.5 highEPSS 0.45%
CVE-2025-27439 Zoom Apps - Buffer Underflow
CVSS 8.5 highEPSS 0.44%
CVE-2025-0151 Zoom Apps - Use After Free
CVSS 8.5 highEPSS 0.44%
CVE-2025-0150 Zoom Workplace Apps for iOS - Incorrect Behavior Order
CVSS 7.1 highEPSS 0.49%
CVE-2025-0149 Zoom Apps - Insufficient Verification of Data Authenticity
CVSS 6.5 mediumEPSS 0.25%
CVE-2024-27239 Zoom Workplace Apps and SDKs - Divide By Zero
CVSS 4.3 mediumEPSS 0.64%
CVE-2024-27246 Zoom Workplace Apps and SDKs - Use After Free
CVSS 4.3 mediumEPSS 0.64%
CVE-2024-27245 Zoom Workplace Apps and SDKs - Buffer Overflow
CVSS 4.3 mediumEPSS 0.64%
CVE-2024-45421 Zoom Apps - Buffer Overflow
CVSS 8.5 highEPSS 0.61%
CVE-2024-45418 Zoom Apps for macOS - Symbolic Link Following
CVSS 5.4 mediumEPSS 0.48%
CVE-2024-45417 Zoom Apps for macOS - Uncontrolled Resource Consumption
CVSS 6.0 mediumEPSS 0.19%
CVE-2024-45426 Zoom Workplace Apps - Incorrect Ownership Assignment
CVSS 4.9 mediumEPSS 0.32%
CVE-2024-45425 Zoom Workplace Apps - Incorrect User Management
CVSS 4.9 mediumEPSS 0.32%
CVE-2024-45424 Zoom Workplace Apps - Business Logic Error
CVSS 5.3 mediumEPSS 0.37%
CVE-2025-0148 Zoom Jenkins Marketplace plugin - Missing Password Field Masking
CVSS 2.6 lowEPSS 0.17%
CVE-2025-0147 Zoom Workplace App for Linux - Type Confusion
CVSS 8.8 highEPSS 0.61%
CVE-2025-0146 Zoom Workplace app for macOS - Symlink Following
CVSS 3.9 lowEPSS 0.23%
CVE-2025-0145 Zoom Workplace Apps for Windows - Untrusted Search Path
CVSS 4.6 mediumEPSS 0.21%
CVE-2025-0144 Zoom Workplace Apps - Out-of-bounds Write
CVSS 3.1 lowEPSS 0.34%
CVE-2025-0143 Zoom Workplace Apps for Linux - Out-of-bounds Write
CVSS 4.3 mediumEPSS 0.47%
CVE-2025-0142 Zoom Jenkins Marketplace plugin - Cleartext Storage of Sensitive Information
CVSS 4.3 mediumEPSS 0.27%
CVE-2024-45422 Zoom Apps - Improper Input Validation
CVSS 6.5 mediumEPSS 0.55%
CVE-2024-45420 Zoom Apps - Uncontrolled Resource Consumption
CVSS 4.3 mediumEPSS 0.47%
CVE-2024-45419 Zoom Apps - Improper Input Validation
CVSS 8.1 highEPSS 0.50%
All vendors’ CVEs · JSON · Markdown
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)