CVEs for Zoom
87 matching vulnerabilities, 0 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVSS 7.4 highEPSS 0.21%Zoom
CVSS 7.4 highEPSS 0.20%Zoom
CVSS 8.0 highEPSS 0.32%Zoom
CVSS 8.1 highEPSS 0.30%Zoom
CVE-2026-53416 Zoom VDI - Path Traversal
CVSS 7.1 highEPSS 0.21%Zoom
CVE-2026-53415 Zoom Clients - Use After Free
CVSS 8.3 highEPSS 0.49%Zoom
CVE-2026-53414 Zoom Clients - Buffer Over-read
CVSS 6.5 mediumEPSS 0.36%Zoom
CVE-2026-53413 Zoom Clients - Buffer Over-write
CVSS 8.3 highEPSS 0.49%Zoom
CVE-2026-53412 Zoom Workplace VDI Plugin for Windows - Improper Input Validation
CVSS 9.8 criticalEPSS 0.53%Zoom
CVE-2026-53411 Zoom Workplace VDI Plugin for Windows - Improper Input Validation
CVSS 7.8 highEPSS 0.14%Zoom
CVE-2026-53410 Zoom Clients for Windows - Race Condition
CVSS 7.0 highEPSS 0.10%Zoom
CVSS 7.8 highEPSS 0.17%Zoom
CVSS 8.1 highEPSS 0.21%Zoom
CVSS 8.1 highEPSS 0.23%Zoom
CVSS 7.8 highEPSS 0.08%Zoom
CVSS 7.8 highEPSS 0.12%Zoom
CVSS 7.8 highEPSS 0.12%Zoom
CVSS 1.8 lowEPSS 0.14%Zoom
CVSS 9.6 criticalEPSS 0.33%Zoom
CVE-2026-30902 Zoom Clients for Windows - Improper Privilege Management
CVSS 7.8 highEPSS 0.12%Zoom
CVE-2026-30901 Zoom Rooms for Windows - Improper Input Validation
CVSS 7.0 highEPSS 0.12%Zoom
CVE-2026-30900 Zoom Workplace Clients for Windows - Improper Check
CVSS 7.8 highEPSS 0.13%Zoom
CVE-2026-22844 Zoom Node Deployments - Command Injection
CVSS 9.9 criticalEPSS 13.5%Zoom
CVE-2025-67460 Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure
CVSS 7.8 highEPSS 0.16%Zoom
CVE-2025-67461 Zoom Rooms for macOS - External Control of File Name or Path
CVSS 5.0 mediumEPSS 0.14%Zoom
CVE-2025-62484 Zoom Workplace Clients - Inefficient Regular Expression Complexity
CVSS 8.1 highEPSS 0.32%Zoom
CVE-2025-62483 Zoom Clients - Improper Removal of Sensitive Information
CVSS 5.3 mediumEPSS 0.29%Zoom
CVE-2025-62482 Zoom Workplace for Windows - Cross-site Scripting
CVSS 4.3 mediumEPSS 0.21%Zoom
CVE-2025-30662 Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following
CVSS 6.6 mediumEPSS 0.14%Zoom
CVE-2025-30669 Zoom Workplace Clients - Improper Certificate Validation
CVSS 4.8 mediumEPSS 0.11%Zoom
CVE-2025-64741 Zoom Workplace for Android - Improper Authorization Handling
CVSS 8.1 highEPSS 0.44%Zoom
CVE-2025-64739 Zoom Clients - External Control of File Name or Path
CVSS 4.3 mediumEPSS 0.33%Zoom
CVE-2025-64738 Zoom Workplace for macOS - External Control of File Name or Path
CVSS 5.0 mediumEPSS 0.16%Zoom
CVE-2025-58133 Zoom Rooms Clients - Authentication Bypass
CVSS 5.3 mediumEPSS 0.28%Zoom
CVE-2025-58132 Zoom Clients for Windows - Command Injection
CVSS 4.1 mediumEPSS 1.8%Zoom
CVE-2025-58135 Zoom Workplace Clients for Windows - Improper Action Enforcement
CVSS 5.3 mediumEPSS 0.26%Zoom
CVE-2025-58134 Zoom Workplace Clients for Windows - Incorrect Authorization
CVSS 4.3 mediumEPSS 0.21%Zoom
CVE-2025-49461 Zoom Workplace Clients - Cross-site Scripting
CVSS 4.3 mediumEPSS 0.31%Zoom
CVE-2025-49460 Zoom Workplace Clients - Argument Injection
CVSS 4.3 mediumEPSS 0.27%Zoom
CVE-2025-49459 Zoom Workplace for Windows on ARM - Missing Authorization
CVSS 7.8 highEPSS 0.15%Zoom
CVE-2025-49458 Zoom Workplace Clients - Buffer Overflow
CVSS 6.5 mediumEPSS 0.32%Zoom
CVE-2025-49457 Zoom Clients for Windows - Untrusted Search Path
CVSS 9.6 criticalEPSS 0.62%Zoom
CVE-2025-49456 Zoom Clients for Windows- Race Condition
CVSS 6.2 mediumEPSS 0.11%Zoom
CVE-2025-49464 Zoom Clients for Windows- Classic Buffer Overflow
CVSS 6.5 mediumEPSS 0.69%Zoom
CVE-2025-49463 Zoom Clients for iOS - Insufficient Control Flow Management
CVSS 6.5 mediumEPSS 0.49%Zoom
CVE-2025-49462 Zoom Clients - Cross-site Scripting
CVSS 3.5 lowEPSS 0.25%Zoom
CVE-2025-46789 Zoom Clients for Windows - Classic Buffer Overflow
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2025-46788 Zoom Workplace for Linux - Improper Certificate Validation
CVSS 7.4 highEPSS 0.28%Zoom
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)