Approved changes feed: RSS · Atom
cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*
part: a version: * update: *
| Vendor | Zoom (f27b522e-dea8-5818-ba42-864516f1d399) |
|---|---|
| Product | Workplace (3284b30a-d1c5-549f-a5bb-574bad9e4039) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | iphone_os |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-62484 |
vulnerable | 2026-06-03 15:07:58.921483 |
Zoom Workplace Clients - Inefficient Regular Expression Complexity
HIGH (8.1)
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
Published: 2025-11-13T15:07:57.937Z
Updated: 2026-02-26T16:57:04.152Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49461 |
vulnerable | 2026-06-03 15:01:44.822916 |
Zoom Workplace Clients - Cross-site Scripting
MEDIUM (4.3)
Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
Published: 2025-09-09T21:42:05.838Z
Updated: 2025-09-10T20:24:36.497Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49460 |
vulnerable | 2026-06-03 15:01:44.821468 |
Zoom Workplace Clients - Argument Injection
MEDIUM (4.3)
Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
Published: 2025-09-09T21:38:40.910Z
Updated: 2025-09-10T20:25:08.077Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46786 |
vulnerable | 2026-06-03 15:01:28.030220 |
Zoom Workplace Apps - Cross-site Scripting
MEDIUM (4.3)
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.
Published: 2025-05-14T17:42:30.374Z
Updated: 2025-10-02T20:59:29.011Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30668 |
vulnerable | 2026-06-03 15:00:29.242573 |
Zoom Workplace Apps - NULL Pointer Dereference
MEDIUM (6.5)
Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-05-14T17:39:55.588Z
Updated: 2025-10-02T20:44:44.793Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30667 |
vulnerable | 2026-06-03 15:00:29.241315 |
Zoom Workplace Apps - NULL Pointer Dereference
MEDIUM (6.5)
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-05-14T17:36:19.136Z
Updated: 2025-05-14T19:00:20.154Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30664 |
vulnerable | 2026-06-03 15:00:29.235899 |
Zoom Workplace Apps - Cross-site Scripting
MEDIUM (6.6)
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
Published: 2025-05-14T17:33:18.777Z
Updated: 2026-02-26T18:28:08.837Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30663 |
vulnerable | 2026-06-03 15:00:29.232239 |
Zoom Workplace Apps - Time-of-check Time-of-use
HIGH (8.8)
Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
Published: 2025-05-14T17:31:03.695Z
Updated: 2026-02-26T18:28:09.221Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27442 |
vulnerable | 2026-06-03 15:00:12.480210 |
Zoom Workplace Apps - Cross Site Scripting
MEDIUM (4.6)
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
Published: 2025-04-08T16:14:53.396Z
Updated: 2026-05-15T18:15:47.314Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27441 |
vulnerable | 2026-06-03 15:00:12.478401 |
Zoom Workplace Apps - Cross Site Scripting
MEDIUM (4.6)
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
Published: 2025-04-08T16:14:40.782Z
Updated: 2026-05-15T18:15:16.837Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27440 |
vulnerable | 2026-06-03 15:00:12.476657 |
Zoom Apps - Heap-based Buffer Overflow
HIGH (8.5)
Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-03-11T17:11:16.928Z
Updated: 2025-03-11T17:40:56.534Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27439 |
vulnerable | 2026-06-03 15:00:12.472279 |
Zoom Apps - Buffer Underflow
HIGH (8.5)
Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-03-11T17:10:28.524Z
Updated: 2025-03-11T18:58:55.987Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0151 |
vulnerable | 2026-06-03 14:58:23.833777 |
Zoom Apps - Use After Free
HIGH (8.5)
Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-03-11T17:08:50.327Z
Updated: 2025-03-11T17:44:08.820Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0150 |
vulnerable | 2026-06-03 14:58:23.832281 |
Zoom Workplace Apps for iOS - Incorrect Behavior Order
HIGH (7.1)
Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-03-11T17:06:43.951Z
Updated: 2025-03-11T18:47:03.336Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0149 |
vulnerable | 2026-06-03 14:58:23.828988 |
Zoom Apps - Insufficient Verification of Data Authenticity
MEDIUM (6.5)
Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.
Published: 2025-03-11T17:04:02.453Z
Updated: 2025-03-11T19:18:34.860Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0144 |
vulnerable | 2026-06-03 14:58:23.810316 |
Zoom Workplace Apps - Out-of-bounds Write
LOW (3.1)
Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access.
Published: 2025-01-30T19:44:06.908Z
Updated: 2025-01-30T21:29:47.382Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45426 |
vulnerable | 2026-06-03 14:56:56.568069 |
Zoom Workplace Apps - Incorrect Ownership Assignment
MEDIUM (4.9)
Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
Published: 2025-02-25T19:39:48.596Z
Updated: 2025-02-26T16:49:25.061Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45425 |
vulnerable | 2026-06-03 14:56:56.567335 |
Zoom Workplace Apps - Incorrect User Management
MEDIUM (4.9)
Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
Published: 2025-02-25T19:38:02.925Z
Updated: 2025-02-26T16:57:20.637Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45424 |
vulnerable | 2026-06-03 14:56:56.561303 |
Zoom Workplace Apps - Business Logic Error
MEDIUM (5.3)
Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
Published: 2025-02-25T19:34:24.811Z
Updated: 2025-02-25T19:39:53.249Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45422 |
vulnerable | 2026-06-03 14:56:56.556105 |
Zoom Apps - Improper Input Validation
MEDIUM (6.5)
Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access.
Published: 2024-11-19T19:45:25.914Z
Updated: 2024-11-20T15:42:40.830Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45421 |
vulnerable | 2026-06-03 14:56:56.551289 |
Zoom Apps - Buffer Overflow
HIGH (8.5)
Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-02-25T19:55:02.666Z
Updated: 2025-02-25T20:09:12.193Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45420 |
vulnerable | 2026-06-03 14:56:56.546464 |
Zoom Apps - Uncontrolled Resource Consumption
MEDIUM (4.3)
Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-11-19T19:32:02.656Z
Updated: 2024-11-20T15:16:27.856Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45419 |
vulnerable | 2026-06-03 14:56:56.541225 |
Zoom Apps - Improper Input Validation
HIGH (8.1)
Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
Published: 2024-11-19T19:28:48.335Z
Updated: 2024-11-19T21:46:16.379Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42438 |
vulnerable | 2026-06-03 14:56:36.847420 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
MEDIUM (6.5)
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-08-14T16:41:18.732Z
Updated: 2024-08-16T20:05:07.811Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42437 |
vulnerable | 2026-06-03 14:56:36.846577 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
MEDIUM (6.5)
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-08-14T16:41:12.866Z
Updated: 2024-08-14T17:44:29.139Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42436 |
vulnerable | 2026-06-03 14:56:36.845593 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
MEDIUM (6.5)
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-08-14T16:41:03.844Z
Updated: 2024-08-14T18:25:52.686Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42435 |
vulnerable | 2026-06-03 14:56:36.844838 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure
MEDIUM (4.9)
Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
Published: 2024-08-14T16:39:46.183Z
Updated: 2024-08-15T13:58:02.205Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42434 |
vulnerable | 2026-06-03 14:56:36.841794 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
MEDIUM (4.9)
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
Published: 2024-08-14T16:39:38.167Z
Updated: 2025-10-07T13:15:09.341Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39825 |
vulnerable | 2026-06-03 14:56:22.531623 |
Zoom Workplace Apps and Rooms Clients - Buffer Overflow
HIGH (8.5)
Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2024-08-14T16:34:53.595Z
Updated: 2024-08-16T13:28:41.388Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39824 |
vulnerable | 2026-06-03 14:56:22.524233 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
MEDIUM (4.9)
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
Published: 2024-08-14T16:39:26.880Z
Updated: 2025-10-02T20:51:37.705Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39823 |
vulnerable | 2026-06-03 14:56:22.523325 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
MEDIUM (4.9)
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
Published: 2024-08-14T16:39:13.132Z
Updated: 2025-10-02T20:49:49.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39822 |
vulnerable | 2026-06-03 14:56:22.521120 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure
MEDIUM (6.5)
Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.
Published: 2024-08-14T16:38:03.416Z
Updated: 2024-08-16T19:18:44.815Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39818 |
vulnerable | 2026-06-03 14:56:22.502098 |
Zoom Workplace Apps and SDKs - Protection Mechanism Failure
HIGH (7.5)
Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.
Published: 2024-08-14T16:36:37.347Z
Updated: 2024-08-16T13:26:38.801Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27246 |
vulnerable | 2026-06-03 14:55:17.125442 |
Zoom Workplace Apps and SDKs - Use After Free
MEDIUM (4.3)
Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-02-25T20:32:33.638Z
Updated: 2025-02-25T21:08:59.293Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27245 |
vulnerable | 2026-06-03 14:55:17.124581 |
Zoom Workplace Apps and SDKs - Buffer Overflow
MEDIUM (4.3)
Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-02-25T20:31:28.555Z
Updated: 2025-02-25T21:08:19.978Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27243 |
vulnerable | 2026-06-03 14:55:17.120318 |
Zoom Apps - Buffer Overflow
MEDIUM (6.5)
Buffer overflow in some Zoom Workplace Apps and SDK’s may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-05-15T20:37:45.264Z
Updated: 2024-09-20T14:34:14.212Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27241 |
vulnerable | 2026-06-03 14:55:17.114305 |
Zoom Apps and SDKs - Improper Input Validation
MEDIUM (5.3)
Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-07-15T17:17:01.679Z
Updated: 2024-08-02T00:27:59.870Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27239 |
vulnerable | 2026-06-03 14:55:17.099735 |
Zoom Workplace Apps and SDKs - Divide By Zero
MEDIUM (4.3)
Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-02-25T20:33:42.787Z
Updated: 2025-10-01T22:45:02.250Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.