Approved changes feed: RSS · Atom

cpe:2.3:a:zoom_communications_inc.:zoom_workplace:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZoom Communications Inc. (95ff05b6-8f24-5e14-aa30-fd618b6afa04)
ProductZoom Workplace (7a7d0bdf-06ec-5e6a-94cf-d2824a502f31)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-30902 vulnerable 2026-06-03 15:19:26.082838 Zoom Clients for Windows - Improper Privilege Management
HIGH (7.8)
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
Published: 2026-03-11T14:50:51.685Z
Updated: 2026-03-12T03:55:32.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-30900 vulnerable 2026-06-03 15:19:26.076985 Zoom Workplace Clients for Windows - Improper Check
HIGH (7.8)
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
Published: 2026-03-11T14:44:36.366Z
Updated: 2026-03-12T03:55:30.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62484 vulnerable 2026-06-03 15:07:58.918496 Zoom Workplace Clients - Inefficient Regular Expression Complexity
HIGH (8.1)
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
Published: 2025-11-13T15:07:57.937Z
Updated: 2026-02-26T16:57:04.152Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62482 vulnerable 2026-06-03 15:07:58.905377 Zoom Workplace for Windows - Cross-site Scripting
MEDIUM (4.3)
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
Published: 2025-11-13T14:56:25.642Z
Updated: 2025-11-13T15:38:29.563Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.