Rooms

External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.

Published: 2025-12-10T20:29:36.221Z
Updated: 2025-12-10T21:27:08.795Z

External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.

Published: 2025-11-13T14:28:58.527Z
Updated: 2025-11-14T16:51:41.747Z

Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.

Published: 2025-11-13T15:03:07.612Z
Updated: 2025-11-13T15:15:51.024Z

Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.

Published: 2025-10-15T16:13:28.273Z
Updated: 2025-11-13T14:01:37.953Z

Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.

Published: 2025-09-09T21:42:05.838Z
Updated: 2025-09-10T20:24:36.497Z

Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.

Published: 2025-09-09T21:38:40.910Z
Updated: 2025-09-10T20:25:08.077Z

Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access.

Published: 2025-09-09T21:25:52.133Z
Updated: 2025-09-10T19:34:03.844Z

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.

Published: 2025-05-14T17:42:30.374Z
Updated: 2025-10-02T20:59:29.011Z

Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.

Published: 2025-05-14T17:39:55.588Z
Updated: 2025-10-02T20:44:44.793Z

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

Published: 2025-05-14T17:36:19.136Z
Updated: 2025-05-14T19:00:20.154Z

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.

Published: 2025-05-14T17:33:18.777Z
Updated: 2026-02-26T18:28:08.837Z

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.

Published: 2025-05-14T17:31:03.695Z
Updated: 2026-02-26T18:28:09.221Z

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.

Published: 2025-04-08T16:14:53.396Z
Updated: 2026-05-15T18:15:47.314Z

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.

Published: 2025-04-08T16:14:40.782Z
Updated: 2026-05-15T18:15:16.837Z

Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.

Published: 2025-03-11T17:11:16.928Z
Updated: 2025-03-11T17:40:56.534Z

Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.

Published: 2025-03-11T17:10:28.524Z
Updated: 2025-03-11T18:58:55.987Z

Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.

Published: 2025-03-11T17:08:50.327Z
Updated: 2025-03-11T17:44:08.820Z

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.

Published: 2025-03-11T17:04:02.453Z
Updated: 2025-03-11T19:18:34.860Z

Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access.

Published: 2025-01-30T19:47:26.128Z
Updated: 2025-01-30T21:22:42.397Z

Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access.

Published: 2025-01-30T19:44:06.908Z
Updated: 2025-01-30T21:29:47.382Z

Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access.

Published: 2025-02-25T19:34:24.811Z
Updated: 2025-02-25T19:39:53.249Z

Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access.

Published: 2024-11-19T19:45:25.914Z
Updated: 2024-11-20T15:42:40.830Z

Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.

Published: 2025-02-25T19:55:02.666Z
Updated: 2025-02-25T20:09:12.193Z

Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access.

Published: 2024-11-19T19:32:02.656Z
Updated: 2024-11-20T15:16:27.856Z

Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.

Published: 2024-11-19T19:28:48.335Z
Updated: 2024-11-19T21:46:16.379Z

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.

Published: 2025-02-25T19:52:25.471Z
Updated: 2025-02-25T20:07:09.959Z

Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access.

Published: 2025-02-25T19:49:22.296Z
Updated: 2025-02-26T16:42:11.552Z

Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

Published: 2024-08-14T16:46:17.936Z
Updated: 2025-10-07T13:17:05.280Z

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

Published: 2024-08-14T16:44:46.080Z
Updated: 2024-08-14T18:06:25.844Z

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

Published: 2024-08-14T16:41:18.732Z
Updated: 2024-08-16T20:05:07.811Z

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

Published: 2024-08-14T16:41:12.866Z
Updated: 2024-08-14T17:44:29.139Z

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

Published: 2024-08-14T16:41:03.844Z
Updated: 2024-08-14T18:25:52.686Z

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Published: 2024-08-14T16:39:46.183Z
Updated: 2024-08-15T13:58:02.205Z

Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Published: 2024-08-14T16:39:38.167Z
Updated: 2025-10-07T13:15:09.341Z

Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.

Published: 2024-08-14T16:34:53.595Z
Updated: 2024-08-16T13:28:41.388Z

Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Published: 2024-08-14T16:39:26.880Z
Updated: 2025-10-02T20:51:37.705Z

Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Published: 2024-08-14T16:39:13.132Z
Updated: 2025-10-02T20:49:49.959Z

Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.

Published: 2024-08-14T16:38:03.416Z
Updated: 2024-08-16T19:18:44.815Z

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.

Published: 2024-08-14T16:36:37.347Z
Updated: 2024-08-16T13:26:38.801Z

Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.

Published: 2025-02-25T20:32:33.638Z
Updated: 2025-02-25T21:08:59.293Z

Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.

Published: 2025-02-25T20:31:28.555Z
Updated: 2025-02-25T21:08:19.978Z

Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.

Published: 2024-07-15T17:17:01.679Z
Updated: 2024-08-02T00:27:59.870Z

Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.

Published: 2025-02-25T20:33:42.787Z
Updated: 2025-10-01T22:45:02.250Z

Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.

Published: 2023-11-14T23:16:55.146Z
Updated: 2025-06-11T14:19:18.235Z

Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.

Published: 2023-11-14T23:15:12.437Z
Updated: 2024-08-29T17:23:41.033Z

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

Published: 2023-11-14T23:12:32.799Z
Updated: 2024-09-19T13:52:36.217Z

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access.

Published: 2023-08-08T17:54:59.577Z
Updated: 2024-10-10T16:20:58.392Z

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.

Published: 2023-08-08T21:38:25.554Z
Updated: 2024-09-27T19:07:24.020Z

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

Published: 2023-11-14T23:02:41.332Z
Updated: 2024-08-29T15:45:07.488Z

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

Published: 2023-11-14T22:28:44.622Z
Updated: 2024-08-29T15:20:45.432Z

Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access.

Published: 2023-11-14T23:06:21.805Z
Updated: 2024-09-19T13:50:58.529Z

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.

Published: 2023-08-08T17:39:51.259Z
Updated: 2024-10-08T15:03:49.453Z

Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.

Published: 2023-08-08T17:30:58.217Z
Updated: 2024-10-09T16:25:28.757Z

Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the victim client could set up a malicious SMB server to respond to client requests, causing the client to execute attacker controlled executables. This could result in an attacker gaining access to a user's device and data, and remote code execution.

Published: 2023-03-27T00:00:00.000Z
Updated: 2025-02-19T15:27:48.810Z

Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.

Published: 2023-01-09T00:00:00.000Z
Updated: 2025-04-09T14:31:47.826Z

Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.

Published: 2023-01-09T00:00:00.000Z
Updated: 2025-04-09T14:31:27.018Z

Zoom Rooms for macOS clients before version 5.11.4 contain an insecure key generation mechanism. The encryption key used for IPC between the Zoom Rooms daemon service and the Zoom Rooms client was generated using parameters that could be obtained by a local low-privileged application. That key can then be used to interact with the daemon service to execute privileged functions and cause a local denial of service.

Published: 2023-01-09T00:00:00.000Z
Updated: 2025-04-09T14:33:28.921Z

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.

Published: 2022-11-14T20:17:59.455Z
Updated: 2025-04-29T19:19:29.673Z