Rooms

Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.

Published: 2025-10-15T16:13:28.273Z
Updated: 2025-11-13T14:01:37.953Z

Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.

Published: 2025-09-09T21:42:05.838Z
Updated: 2025-09-10T20:24:36.497Z

Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.

Published: 2025-09-09T21:38:40.910Z
Updated: 2025-09-10T20:25:08.077Z

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.

Published: 2025-05-14T17:42:30.374Z
Updated: 2025-10-02T20:59:29.011Z

Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.

Published: 2025-05-14T17:39:55.588Z
Updated: 2025-10-02T20:44:44.793Z

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

Published: 2025-05-14T17:36:19.136Z
Updated: 2025-05-14T19:00:20.154Z

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.

Published: 2025-05-14T17:33:18.777Z
Updated: 2026-02-26T18:28:08.837Z

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.

Published: 2025-05-14T17:31:03.695Z
Updated: 2026-02-26T18:28:09.221Z

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.

Published: 2025-04-08T16:14:53.396Z
Updated: 2026-05-15T18:15:47.314Z

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.

Published: 2025-04-08T16:14:40.782Z
Updated: 2026-05-15T18:15:16.837Z

Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.

Published: 2025-03-11T17:11:16.928Z
Updated: 2025-03-11T17:40:56.534Z

Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.

Published: 2025-03-11T17:10:28.524Z
Updated: 2025-03-11T18:58:55.987Z

Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.

Published: 2025-03-11T17:08:50.327Z
Updated: 2025-03-11T17:44:08.820Z

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.

Published: 2025-03-11T17:04:02.453Z
Updated: 2025-03-11T19:18:34.860Z

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

Published: 2023-11-14T23:12:32.799Z
Updated: 2024-09-19T13:52:36.217Z

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access.

Published: 2023-08-08T17:54:59.577Z
Updated: 2024-10-10T16:20:58.392Z

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.

Published: 2023-08-08T21:38:25.554Z
Updated: 2024-09-27T19:07:24.020Z

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

Published: 2023-11-14T23:02:41.332Z
Updated: 2024-08-29T15:45:07.488Z

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

Published: 2023-11-14T22:28:44.622Z
Updated: 2024-08-29T15:20:45.432Z

Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access.

Published: 2023-11-14T23:06:21.805Z
Updated: 2024-09-19T13:50:58.529Z

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.

Published: 2023-08-08T17:39:51.259Z
Updated: 2024-10-08T15:03:49.453Z

Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.

Published: 2023-08-08T17:30:58.217Z
Updated: 2024-10-09T16:25:28.757Z

Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the victim client could set up a malicious SMB server to respond to client requests, causing the client to execute attacker controlled executables. This could result in an attacker gaining access to a user's device and data, and remote code execution.

Published: 2023-03-27T00:00:00.000Z
Updated: 2025-02-19T15:27:48.810Z

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.

Published: 2022-11-14T20:17:59.455Z
Updated: 2025-04-29T19:19:29.673Z