Approved changes feed: RSS · Atom

cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:linux:*:*

part: a version: * update: *

VendorZoom (f27b522e-dea8-5818-ba42-864516f1d399)
ProductMeeting Software Development Kit (78c389b8-f75e-5941-8bb0-2ea14c65cfca)
Edition*
Language*
Software edition*
Target softwarelinux
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64739 vulnerable 2026-06-03 15:09:39.733907 Zoom Clients - External Control of File Name or Path
MEDIUM (4.3)
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
Published: 2025-11-13T14:28:58.527Z
Updated: 2025-11-14T16:51:41.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62483 vulnerable 2026-06-03 15:07:58.909055 Zoom Clients - Improper Removal of Sensitive Information
MEDIUM (5.3)
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
Published: 2025-11-13T15:03:07.612Z
Updated: 2025-11-13T15:15:51.024Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49461 vulnerable 2026-06-03 15:01:44.822363 Zoom Workplace Clients - Cross-site Scripting
MEDIUM (4.3)
Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
Published: 2025-09-09T21:42:05.838Z
Updated: 2025-09-10T20:24:36.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49460 vulnerable 2026-06-03 15:01:44.815619 Zoom Workplace Clients - Argument Injection
MEDIUM (4.3)
Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
Published: 2025-09-09T21:38:40.910Z
Updated: 2025-09-10T20:25:08.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49458 vulnerable 2026-06-03 15:01:44.806311 Zoom Workplace Clients - Buffer Overflow
MEDIUM (6.5)
Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-09-09T21:25:52.133Z
Updated: 2025-09-10T19:34:03.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46786 vulnerable 2026-06-03 15:01:28.022174 Zoom Workplace Apps - Cross-site Scripting
MEDIUM (4.3)
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.
Published: 2025-05-14T17:42:30.374Z
Updated: 2025-10-02T20:59:29.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30669 vulnerable 2026-06-03 15:00:29.249250 Zoom Workplace Clients - Improper Certificate Validation
MEDIUM (4.8)
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
Published: 2025-11-13T14:49:54.870Z
Updated: 2025-11-13T15:17:54.292Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30668 vulnerable 2026-06-03 15:00:29.242028 Zoom Workplace Apps - NULL Pointer Dereference
MEDIUM (6.5)
Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-05-14T17:39:55.588Z
Updated: 2025-10-02T20:44:44.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30667 vulnerable 2026-06-03 15:00:29.240564 Zoom Workplace Apps - NULL Pointer Dereference
MEDIUM (6.5)
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-05-14T17:36:19.136Z
Updated: 2025-05-14T19:00:20.154Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30664 vulnerable 2026-06-03 15:00:29.235259 Zoom Workplace Apps - Cross-site Scripting
MEDIUM (6.6)
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
Published: 2025-05-14T17:33:18.777Z
Updated: 2026-02-26T18:28:08.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30663 vulnerable 2026-06-03 15:00:29.225022 Zoom Workplace Apps - Time-of-check Time-of-use
HIGH (8.8)
Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
Published: 2025-05-14T17:31:03.695Z
Updated: 2026-02-26T18:28:09.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27442 vulnerable 2026-06-03 15:00:12.479211 Zoom Workplace Apps - Cross Site Scripting
MEDIUM (4.6)
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
Published: 2025-04-08T16:14:53.396Z
Updated: 2026-05-15T18:15:47.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27441 vulnerable 2026-06-03 15:00:12.477578 Zoom Workplace Apps - Cross Site Scripting
MEDIUM (4.6)
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
Published: 2025-04-08T16:14:40.782Z
Updated: 2026-05-15T18:15:16.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27440 vulnerable 2026-06-03 15:00:12.476111 Zoom Apps - Heap-based Buffer Overflow
HIGH (8.5)
Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-03-11T17:11:16.928Z
Updated: 2025-03-11T17:40:56.534Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27439 vulnerable 2026-06-03 15:00:12.462791 Zoom Apps - Buffer Underflow
HIGH (8.5)
Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-03-11T17:10:28.524Z
Updated: 2025-03-11T18:58:55.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0151 vulnerable 2026-06-03 14:58:23.832953 Zoom Apps - Use After Free
HIGH (8.5)
Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-03-11T17:08:50.327Z
Updated: 2025-03-11T17:44:08.820Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0149 vulnerable 2026-06-03 14:58:23.827006 Zoom Apps - Insufficient Verification of Data Authenticity
MEDIUM (6.5)
Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.
Published: 2025-03-11T17:04:02.453Z
Updated: 2025-03-11T19:18:34.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0147 vulnerable 2026-06-03 14:58:23.824756 Zoom Workplace App for Linux - Type Confusion
HIGH (8.8)
Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation of privilege via network access.
Published: 2025-01-30T19:49:00.792Z
Updated: 2025-01-30T20:08:44.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0144 vulnerable 2026-06-03 14:58:23.798660 Zoom Workplace Apps - Out-of-bounds Write
LOW (3.1)
Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access.
Published: 2025-01-30T19:44:06.908Z
Updated: 2025-01-30T21:29:47.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0143 vulnerable 2026-06-03 14:58:23.794010 Zoom Workplace Apps for Linux - Out-of-bounds Write
MEDIUM (4.3)
Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a denial of service via network access.
Published: 2025-01-30T19:42:12.816Z
Updated: 2025-01-31T15:38:36.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45426 vulnerable 2026-06-03 14:56:56.567842 Zoom Workplace Apps - Incorrect Ownership Assignment
MEDIUM (4.9)
Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
Published: 2025-02-25T19:39:48.596Z
Updated: 2025-02-26T16:49:25.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45425 vulnerable 2026-06-03 14:56:56.561919 Zoom Workplace Apps - Incorrect User Management
MEDIUM (4.9)
Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
Published: 2025-02-25T19:38:02.925Z
Updated: 2025-02-26T16:57:20.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45424 vulnerable 2026-06-03 14:56:56.561107 Zoom Workplace Apps - Business Logic Error
MEDIUM (5.3)
Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
Published: 2025-02-25T19:34:24.811Z
Updated: 2025-02-25T19:39:53.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45422 vulnerable 2026-06-03 14:56:56.555659 Zoom Apps - Improper Input Validation
MEDIUM (6.5)
Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access.
Published: 2024-11-19T19:45:25.914Z
Updated: 2024-11-20T15:42:40.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45421 vulnerable 2026-06-03 14:56:56.549426 Zoom Apps - Buffer Overflow
HIGH (8.5)
Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-02-25T19:55:02.666Z
Updated: 2025-02-25T20:09:12.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45420 vulnerable 2026-06-03 14:56:56.543889 Zoom Apps - Uncontrolled Resource Consumption
MEDIUM (4.3)
Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-11-19T19:32:02.656Z
Updated: 2024-11-20T15:16:27.856Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45419 vulnerable 2026-06-03 14:56:56.533040 Zoom Apps - Improper Input Validation
HIGH (8.1)
Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
Published: 2024-11-19T19:28:48.335Z
Updated: 2024-11-19T21:46:16.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27246 vulnerable 2026-06-03 14:55:17.125134 Zoom Workplace Apps and SDKs - Use After Free
MEDIUM (4.3)
Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-02-25T20:32:33.638Z
Updated: 2025-02-25T21:08:59.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27245 vulnerable 2026-06-03 14:55:17.124461 Zoom Workplace Apps and SDKs - Buffer Overflow
MEDIUM (4.3)
Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-02-25T20:31:28.555Z
Updated: 2025-02-25T21:08:19.978Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27243 vulnerable 2026-06-03 14:55:17.120138 Zoom Apps - Buffer Overflow
MEDIUM (6.5)
Buffer overflow in some Zoom Workplace Apps and SDK’s may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-05-15T20:37:45.264Z
Updated: 2024-09-20T14:34:14.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27241 vulnerable 2026-06-03 14:55:17.114198 Zoom Apps and SDKs - Improper Input Validation
MEDIUM (5.3)
Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-07-15T17:17:01.679Z
Updated: 2024-08-02T00:27:59.870Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27239 vulnerable 2026-06-03 14:55:17.093900 Zoom Workplace Apps and SDKs - Divide By Zero
MEDIUM (4.3)
Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-02-25T20:33:42.787Z
Updated: 2025-10-01T22:45:02.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39217 vulnerable 2026-06-03 14:52:37.944104 Details available
MEDIUM (5.3)
Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access.
Published: 2023-08-08T17:49:38.142Z
Updated: 2024-10-10T16:21:43.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39214 vulnerable 2026-06-03 14:52:37.938235 Details available
HIGH (7.6)
Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.
Published: 2023-08-08T21:38:25.554Z
Updated: 2024-09-27T19:07:24.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36533 vulnerable 2026-06-03 14:52:26.589280 Details available
HIGH (7.1)
Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access.
Published: 2023-08-08T17:33:47.868Z
Updated: 2024-10-04T15:05:48.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.