RO
Product
Rooms
109
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 58Medium 49Low 1
Watch
Add Rooms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-24691 | 9.8 | Feb 14 | Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation Affected: before 5.17.0 |
| CVE-2025-49457 | 8.8 | Aug 12 | Zoom Clients for Windows - Untrusted Search Path Affected: before 6.3.10 |
| CVE-2025-27440 | 8.8 | Mar 11 | Zoom Apps - Heap-based Buffer Overflow Affected: before 6.3.0; before 6.3.0; before 6.3.0; before 6.3.0 |
| CVE-2025-27439 | 8.8 | Mar 11 | Zoom Apps - Buffer Underflow Affected: before 6.3.0; before 6.3.0; before 6.3.0; before 6.3.0 |
| CVE-2025-0151 | 8.8 | Mar 11 | Zoom Apps - Use After Free Affected: before 6.3.0; before 6.3.0; before 6.3.0; before 6.3.0 |
| CVE-2024-45421 | 8.8 | Feb 25 | Zoom Apps - Buffer Overflow Affected: before 6.2.0; before 6.2.0; before 6.2.0 |
| CVE-2024-45418 | 8.8 | Feb 25 | Zoom Apps for macOS - Symbolic Link Following Affected: before 6.1.5 |
| CVE-2023-43582 | 8.8 | Nov 14 | Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-34121 | 8.8 | Jun 13 | Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an… Affected: before 5.14.0 |
| CVE-2022-22786 | 8.8 | May 18 | The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation… Affected: before 5.10.0 |
| CVE-2024-39825 | 8.5 | Aug 14 | Zoom Workplace Apps and Rooms Clients - Buffer Overflow Affected: before 6.0.0; before 6.0.0; before 6.0.0 |
| CVE-2025-30664 | 8.2 | May 14 | Zoom Workplace Apps - Cross-site Scripting Affected: before 6.4.0; before 6.4.0; before 6.4.0; before 6.4.0 |
| CVE-2023-39214 | 8.1 | Aug 8 | Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access Affected: before 5.15.5; before 5.15.5; before 5.15.5; before 5.15.5 |
| CVE-2026-53409 | 7.8 | Jul 16 | Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access Affected: before 7.1.0 |
| CVE-2026-30906 | 7.8 | May 13 | Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access Affected: before 7.0.0 |
| CVE-2026-30902 | 7.8 | Mar 11 | Zoom Clients for Windows - Improper Privilege Management Affected: before 6.6.0 |
| CVE-2026-30901 | 7.8 | Mar 11 | Zoom Rooms for Windows - Improper Input Validation Affected: before 6.6.5 |
| CVE-2025-67460 | 7.8 | Dec 10 | Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure Affected: before 6.6.0 |
| CVE-2025-0145 | 7.8 | Jan 30 | Zoom Workplace Apps for Windows - Untrusted Search Path Affected: before 6.2.5 |
| CVE-2024-27240 | 7.8 | Jul 15 | Zoom Apps for Windows - Improper Input Validation Affected: before 6.0.0 |
| CVE-2024-24697 | 7.8 | Feb 13 | Zoom Clients - Untrusted Search Path Affected: before 5.17.0 |
| CVE-2023-43591 | 7.8 | Nov 14 | Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access Affected: before 5.16.0 |
| CVE-2023-43590 | 7.8 | Nov 14 | Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access Affected: before 5.16.0 |
| CVE-2023-39211 | 7.8 | Aug 8 | Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via… Affected: before 5.15.5 |
| CVE-2023-36538 | 7.8 | Jul 11 | Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access Affected: before 5.15.0 |
| CVE-2023-36537 | 7.8 | Jul 11 | Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access Affected: before 5.14.5 |
| CVE-2023-36536 | 7.8 | Jul 11 | Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access Affected: before 5.15.0 |
| CVE-2023-34119 | 7.8 | Jul 11 | Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access Affected: before 5.15.0 |
| CVE-2023-34118 | 7.8 | Jul 11 | Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access Affected: before 5.14.5 |
| CVE-2022-36930 | 7.8 | Jan 9 | Zoom Rooms for Windows installers before version 5.13.0 contain a local privilege escalation vulnerability Affected: before 5.13.0 |
| CVE-2022-36929 | 7.8 | Jan 9 | The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability Affected: before 5.12.7 |
| CVE-2022-36927 | 7.8 | Jan 9 | Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability Affected: before 5.11.3 |
| CVE-2022-36926 | 7.8 | Jan 9 | Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability Affected: before 5.11.3 |
| CVE-2022-36925 | 7.8 | Jan 9 | Zoom Rooms for macOS clients before version 5.11.4 contain an insecure key generation mechanism Affected: before 5.11.4 |
| CVE-2022-36924 | 7.8 | Nov 17 | The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability Affected: before 5.12.6 |
| CVE-2022-28752 | 7.8 | Aug 17 | Zoom Rooms for Conference Rooms for Windows versions before 5.11.0 are susceptible to a Local Privilege Escalation vulnerability Affected: before 5.11.0 |
| CVE-2022-22788 | 7.8 | Jun 15 | The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed Affected: before 5.10.3 |
| CVE-2021-34411 | 7.8 | Sep 27 | During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges Affected: before 5.3.0 |
| CVE-2021-34409 | 7.8 | Sep 27 | It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.2.0, Zoom Client Plugin for… Affected: before 5.1.0 |
| CVE-2025-62483 | 7.5 | Nov 13 | Zoom Clients - Improper Removal of Sensitive Information Affected: before 6.5.10; before 6.5.10; before 6.5.10 |
| CVE-2025-64739 | 7.5 | Nov 13 | Zoom Clients - External Control of File Name or Path Affected: before 6.5.10; before 6.5.10; before 6.5.10 |
| CVE-2025-58133 | 7.5 | Oct 15 | Zoom Rooms Clients - Authentication Bypass Affected: before 6.5.1; before 6.5.1; before 6.5.1; before 6.5.1; before 6.5.1 |
| CVE-2025-49460 | 7.5 | Sep 9 | Zoom Workplace Clients - Argument Injection Affected: before 6.5.0; before 6.5.0; before 6.5.0; before 6.5.0 |
| CVE-2025-0149 | 7.5 | Mar 11 | Zoom Apps - Insufficient Verification of Data Authenticity Affected: before 6.3.0; before 6.3.0; before 6.3.0; before 6.3.0 |
| CVE-2024-45424 | 7.5 | Feb 25 | Zoom Workplace Apps - Business Logic Error Affected: before 6.1.0; before 6.1.0; before 6.1.0 |
| CVE-2024-45422 | 7.5 | Nov 19 | Zoom Apps - Improper Input Validation Affected: before 6.2.0; before 6.2.0; before 6.2.0 |
| CVE-2024-45419 | 7.5 | Nov 19 | Zoom Apps - Improper Input Validation Affected: before 6.2.0; before 6.2.0; before 6.2.0 |
| CVE-2024-27241 | 7.5 | Jul 15 | Zoom Apps and SDKs - Improper Input Validation Affected: before 6.0.0; before 6.0.0; before 6.0.0 |
| CVE-2023-39206 | 7.5 | Nov 14 | Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access Affected: before 5.16.0; before 5.16.0; before 5.16.0; before 5.16.0 |
| CVE-2023-39204 | 7.5 | Nov 14 | Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access Affected: before 5.15.10; before 5.15.10; before 5.15.10; before 5.15.10 |