CVEs for Zoom
87 matching vulnerabilities, 0 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-46786 Zoom Workplace Apps - Cross-site Scripting
CVSS 4.3 mediumEPSS 0.31%Zoom
CVE-2025-46785 Zoom Workplace Apps for Windows - Buffer Over-read
CVSS 6.5 mediumEPSS 0.58%Zoom
CVE-2025-30668 Zoom Workplace Apps - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2025-30667 Zoom Workplace Apps - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2025-30666 Zoom Workplace Apps for Windows - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2025-30665 Zoom Workplace Apps for Windows - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2025-30664 Zoom Workplace Apps - Cross-site Scripting
CVSS 6.6 mediumEPSS 0.27%Zoom
CVE-2025-30663 Zoom Workplace Apps - Time-of-check Time-of-use
CVSS 8.8 highEPSS 0.15%Zoom
CVE-2025-30671 Zoom Workplace Apps for Windows - Null Pointer
CVSS 6.5 mediumEPSS 0.41%Zoom
CVE-2025-30670 Zoom Workplace Apps for Windows - Null Pointer
CVSS 6.5 mediumEPSS 0.42%Zoom
CVE-2025-27443 Zoom Workplace Apps for Windows - Insecure Default Variable Initialization
CVSS 2.8 lowEPSS 0.16%Zoom
CVE-2025-27442 Zoom Workplace Apps - Cross Site Scripting
CVSS 4.6 mediumEPSS 0.24%Zoom
CVE-2025-27441 Zoom Workplace Apps - Cross Site Scripting
CVSS 4.6 mediumEPSS 0.25%Zoom
CVE-2025-27440 Zoom Apps - Heap-based Buffer Overflow
CVSS 8.5 highEPSS 0.45%Zoom
CVE-2025-27439 Zoom Apps - Buffer Underflow
CVSS 8.5 highEPSS 0.44%Zoom
CVE-2025-0151 Zoom Apps - Use After Free
CVSS 8.5 highEPSS 0.44%Zoom
CVE-2025-0150 Zoom Workplace Apps for iOS - Incorrect Behavior Order
CVSS 7.1 highEPSS 0.49%Zoom
CVE-2025-0149 Zoom Apps - Insufficient Verification of Data Authenticity
CVSS 6.5 mediumEPSS 0.25%Zoom
CVE-2024-27239 Zoom Workplace Apps and SDKs - Divide By Zero
CVSS 4.3 mediumEPSS 0.64%Zoom
CVE-2024-27246 Zoom Workplace Apps and SDKs - Use After Free
CVSS 4.3 mediumEPSS 0.64%Zoom
CVE-2024-27245 Zoom Workplace Apps and SDKs - Buffer Overflow
CVSS 4.3 mediumEPSS 0.64%Zoom
CVE-2024-45421 Zoom Apps - Buffer Overflow
CVSS 8.5 highEPSS 0.61%Zoom
CVE-2024-45418 Zoom Apps for macOS - Symbolic Link Following
CVSS 5.4 mediumEPSS 0.48%Zoom
CVE-2024-45417 Zoom Apps for macOS - Uncontrolled Resource Consumption
CVSS 6.0 mediumEPSS 0.19%Zoom
CVE-2024-45426 Zoom Workplace Apps - Incorrect Ownership Assignment
CVSS 4.9 mediumEPSS 0.32%Zoom
CVE-2024-45425 Zoom Workplace Apps - Incorrect User Management
CVSS 4.9 mediumEPSS 0.32%Zoom
CVE-2024-45424 Zoom Workplace Apps - Business Logic Error
CVSS 5.3 mediumEPSS 0.37%Zoom
CVE-2025-0148 Zoom Jenkins Marketplace plugin - Missing Password Field Masking
CVSS 2.6 lowEPSS 0.17%Zoom
CVE-2025-0147 Zoom Workplace App for Linux - Type Confusion
CVSS 8.8 highEPSS 0.61%Zoom
CVE-2025-0146 Zoom Workplace app for macOS - Symlink Following
CVSS 3.9 lowEPSS 0.23%Zoom
CVE-2025-0145 Zoom Workplace Apps for Windows - Untrusted Search Path
CVSS 4.6 mediumEPSS 0.21%Zoom
CVE-2025-0144 Zoom Workplace Apps - Out-of-bounds Write
CVSS 3.1 lowEPSS 0.34%Zoom
CVE-2025-0143 Zoom Workplace Apps for Linux - Out-of-bounds Write
CVSS 4.3 mediumEPSS 0.47%Zoom
CVE-2025-0142 Zoom Jenkins Marketplace plugin - Cleartext Storage of Sensitive Information
CVSS 4.3 mediumEPSS 0.27%Zoom
CVE-2024-45422 Zoom Apps - Improper Input Validation
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2024-45420 Zoom Apps - Uncontrolled Resource Consumption
CVSS 4.3 mediumEPSS 0.47%Zoom
CVE-2024-45419 Zoom Apps - Improper Input Validation
CVSS 8.1 highEPSS 0.50%Zoom
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)