Rooms Controller
Approved changes feed: RSS · Atom
cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*
part: a version: * update: *
| Vendor | Zoom (f27b522e-dea8-5818-ba42-864516f1d399) |
|---|---|
| Product | Rooms Controller (5674d2ab-7c53-508f-8824-7ffb4fb8562a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | windows |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-64739 |
vulnerable | 2026-06-03 15:09:39.739962 |
Zoom Clients - External Control of File Name or Path
MEDIUM (4.3)
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
Published: 2025-11-13T14:28:58.527Z
Updated: 2025-11-14T16:51:41.747Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62483 |
vulnerable | 2026-06-03 15:07:58.915619 |
Zoom Clients - Improper Removal of Sensitive Information
MEDIUM (5.3)
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
Published: 2025-11-13T15:03:07.612Z
Updated: 2025-11-13T15:15:51.024Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58135 |
vulnerable | 2026-06-03 15:06:20.764078 |
Zoom Workplace Clients for Windows - Improper Action Enforcement
MEDIUM (5.3)
Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.
Published: 2025-09-09T21:45:52.362Z
Updated: 2025-09-10T19:33:42.439Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58134 |
vulnerable | 2026-06-03 15:06:20.763194 |
Zoom Workplace Clients for Windows - Incorrect Authorization
MEDIUM (4.3)
Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access.
Published: 2025-09-09T21:44:01.928Z
Updated: 2025-09-10T20:24:12.585Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49461 |
vulnerable | 2026-06-03 15:01:44.822817 |
Zoom Workplace Clients - Cross-site Scripting
MEDIUM (4.3)
Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
Published: 2025-09-09T21:42:05.838Z
Updated: 2025-09-10T20:24:36.497Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49460 |
vulnerable | 2026-06-03 15:01:44.820342 |
Zoom Workplace Clients - Argument Injection
MEDIUM (4.3)
Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
Published: 2025-09-09T21:38:40.910Z
Updated: 2025-09-10T20:25:08.077Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49458 |
vulnerable | 2026-06-03 15:01:44.810495 |
Zoom Workplace Clients - Buffer Overflow
MEDIUM (6.5)
Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-09-09T21:25:52.133Z
Updated: 2025-09-10T19:34:03.844Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49457 |
vulnerable | 2026-06-03 15:01:44.802028 |
Zoom Clients for Windows - Untrusted Search Path
CRITICAL (9.6)
Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access
Published: 2025-08-12T22:54:20.362Z
Updated: 2026-02-26T17:48:42.934Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49456 |
vulnerable | 2026-06-03 15:01:44.799927 |
Zoom Clients for Windows- Race Condition
MEDIUM (6.2)
Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access.
Published: 2025-08-12T22:52:22.718Z
Updated: 2025-08-13T13:24:11.169Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46786 |
vulnerable | 2026-06-03 15:01:28.028516 |
Zoom Workplace Apps - Cross-site Scripting
MEDIUM (4.3)
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.
Published: 2025-05-14T17:42:30.374Z
Updated: 2025-10-02T20:59:29.011Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46785 |
vulnerable | 2026-06-03 15:01:28.016776 |
Zoom Workplace Apps for Windows - Buffer Over-read
MEDIUM (6.5)
Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-05-14T17:41:06.374Z
Updated: 2025-05-14T19:00:08.453Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30671 |
vulnerable | 2026-06-03 15:00:29.250674 |
Zoom Workplace Apps for Windows - Null Pointer
MEDIUM (6.5)
Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-04-08T16:21:01.713Z
Updated: 2025-04-08T20:14:04.268Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30670 |
vulnerable | 2026-06-03 15:00:29.250163 |
Zoom Workplace Apps for Windows - Null Pointer
MEDIUM (6.5)
Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-04-08T16:20:54.607Z
Updated: 2025-04-08T20:20:47.470Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30668 |
vulnerable | 2026-06-03 15:00:29.242482 |
Zoom Workplace Apps - NULL Pointer Dereference
MEDIUM (6.5)
Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-05-14T17:39:55.588Z
Updated: 2025-10-02T20:44:44.793Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30667 |
vulnerable | 2026-06-03 15:00:29.241125 |
Zoom Workplace Apps - NULL Pointer Dereference
MEDIUM (6.5)
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-05-14T17:36:19.136Z
Updated: 2025-05-14T19:00:20.154Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30666 |
vulnerable | 2026-06-03 15:00:29.239909 |
Zoom Workplace Apps for Windows - NULL Pointer Dereference
MEDIUM (6.5)
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-05-14T17:35:15.485Z
Updated: 2025-05-14T19:00:27.119Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30665 |
vulnerable | 2026-06-03 15:00:29.239177 |
Zoom Workplace Apps for Windows - NULL Pointer Dereference
MEDIUM (6.5)
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
Published: 2025-05-14T17:35:06.968Z
Updated: 2025-05-14T19:00:31.446Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30664 |
vulnerable | 2026-06-03 15:00:29.235862 |
Zoom Workplace Apps - Cross-site Scripting
MEDIUM (6.6)
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
Published: 2025-05-14T17:33:18.777Z
Updated: 2026-02-26T18:28:08.837Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30663 |
vulnerable | 2026-06-03 15:00:29.231035 |
Zoom Workplace Apps - Time-of-check Time-of-use
HIGH (8.8)
Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
Published: 2025-05-14T17:31:03.695Z
Updated: 2026-02-26T18:28:09.221Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27443 |
vulnerable | 2026-06-03 15:00:12.487672 |
Zoom Workplace Apps for Windows - Insecure Default Variable Initialization
LOW (2.8)
Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access.
Published: 2025-04-08T16:16:38.148Z
Updated: 2025-04-08T20:32:12.324Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27442 |
vulnerable | 2026-06-03 15:00:12.480095 |
Zoom Workplace Apps - Cross Site Scripting
MEDIUM (4.6)
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
Published: 2025-04-08T16:14:53.396Z
Updated: 2026-05-15T18:15:47.314Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27441 |
vulnerable | 2026-06-03 15:00:12.478366 |
Zoom Workplace Apps - Cross Site Scripting
MEDIUM (4.6)
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
Published: 2025-04-08T16:14:40.782Z
Updated: 2026-05-15T18:15:16.837Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27440 |
vulnerable | 2026-06-03 15:00:12.476624 |
Zoom Apps - Heap-based Buffer Overflow
HIGH (8.5)
Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-03-11T17:11:16.928Z
Updated: 2025-03-11T17:40:56.534Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27439 |
vulnerable | 2026-06-03 15:00:12.471218 |
Zoom Apps - Buffer Underflow
HIGH (8.5)
Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-03-11T17:10:28.524Z
Updated: 2025-03-11T18:58:55.987Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0151 |
vulnerable | 2026-06-03 14:58:23.833666 |
Zoom Apps - Use After Free
HIGH (8.5)
Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-03-11T17:08:50.327Z
Updated: 2025-03-11T17:44:08.820Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0149 |
vulnerable | 2026-06-03 14:58:23.828952 |
Zoom Apps - Insufficient Verification of Data Authenticity
MEDIUM (6.5)
Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.
Published: 2025-03-11T17:04:02.453Z
Updated: 2025-03-11T19:18:34.860Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0145 |
vulnerable | 2026-06-03 14:58:23.815045 |
Zoom Workplace Apps for Windows - Untrusted Search Path
MEDIUM (4.6)
Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.
Published: 2025-01-30T19:45:39.432Z
Updated: 2025-01-30T21:23:22.776Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0144 |
vulnerable | 2026-06-03 14:58:23.806046 |
Zoom Workplace Apps - Out-of-bounds Write
LOW (3.1)
Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access.
Published: 2025-01-30T19:44:06.908Z
Updated: 2025-01-30T21:29:47.382Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45426 |
vulnerable | 2026-06-03 14:56:56.568051 |
Zoom Workplace Apps - Incorrect Ownership Assignment
MEDIUM (4.9)
Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
Published: 2025-02-25T19:39:48.596Z
Updated: 2025-02-26T16:49:25.061Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45425 |
vulnerable | 2026-06-03 14:56:56.567297 |
Zoom Workplace Apps - Incorrect User Management
MEDIUM (4.9)
Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
Published: 2025-02-25T19:38:02.925Z
Updated: 2025-02-26T16:57:20.637Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45424 |
vulnerable | 2026-06-03 14:56:56.561269 |
Zoom Workplace Apps - Business Logic Error
MEDIUM (5.3)
Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
Published: 2025-02-25T19:34:24.811Z
Updated: 2025-02-25T19:39:53.249Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45422 |
vulnerable | 2026-06-03 14:56:56.555819 |
Zoom Apps - Improper Input Validation
MEDIUM (6.5)
Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access.
Published: 2024-11-19T19:45:25.914Z
Updated: 2024-11-20T15:42:40.830Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45421 |
vulnerable | 2026-06-03 14:56:56.551068 |
Zoom Apps - Buffer Overflow
HIGH (8.5)
Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Published: 2025-02-25T19:55:02.666Z
Updated: 2025-02-25T20:09:12.193Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45420 |
vulnerable | 2026-06-03 14:56:56.546187 |
Zoom Apps - Uncontrolled Resource Consumption
MEDIUM (4.3)
Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-11-19T19:32:02.656Z
Updated: 2024-11-20T15:16:27.856Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42438 |
vulnerable | 2026-06-03 14:56:36.847388 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
MEDIUM (6.5)
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-08-14T16:41:18.732Z
Updated: 2024-08-16T20:05:07.811Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42437 |
vulnerable | 2026-06-03 14:56:36.846457 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
MEDIUM (6.5)
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-08-14T16:41:12.866Z
Updated: 2024-08-14T17:44:29.139Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42436 |
vulnerable | 2026-06-03 14:56:36.845561 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
MEDIUM (6.5)
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.
Published: 2024-08-14T16:41:03.844Z
Updated: 2024-08-14T18:25:52.686Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42435 |
vulnerable | 2026-06-03 14:56:36.844799 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure
MEDIUM (4.9)
Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
Published: 2024-08-14T16:39:46.183Z
Updated: 2024-08-15T13:58:02.205Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42434 |
vulnerable | 2026-06-03 14:56:36.840858 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
MEDIUM (4.9)
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
Published: 2024-08-14T16:39:38.167Z
Updated: 2025-10-07T13:15:09.341Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39824 |
vulnerable | 2026-06-03 14:56:22.524200 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
MEDIUM (4.9)
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
Published: 2024-08-14T16:39:26.880Z
Updated: 2025-10-02T20:51:37.705Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39823 |
vulnerable | 2026-06-03 14:56:22.523291 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
MEDIUM (4.9)
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
Published: 2024-08-14T16:39:13.132Z
Updated: 2025-10-02T20:49:49.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39822 |
vulnerable | 2026-06-03 14:56:22.521051 |
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure
MEDIUM (6.5)
Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.
Published: 2024-08-14T16:38:03.416Z
Updated: 2024-08-16T19:18:44.815Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.