Zoom Zoom

  1. Vendors
  2. Zoom

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Zoom product.

RSS Feeds for Zoom security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Zoom products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Zoom Sorted by Most Security Vulnerabilities since 2018

Zoom61 vulnerabilities

Zoom Rooms60 vulnerabilities

Zoom Meetings34 vulnerabilities

Zoom Meeting Software Development Kit33 vulnerabilities

Zoom Virtual Desktop Infrastructure23 vulnerabilities

Zoom Workplace Desktop19 vulnerabilities

Zoom Video Software Development Kit15 vulnerabilities

Zoom Workplace14 vulnerabilities

Zoom Workplace Virtual Desktop Infrastructure13 vulnerabilities

Zoom Rooms Controller12 vulnerabilities

Zoom Vdi Windows Meeting Clients9 vulnerabilities

Zoom Meeting Sdk3 vulnerabilities

Zoom Software Development Kit1 vulnerability

Cleanzoom1 vulnerability

By the Year

In 2025 there have been 6 vulnerabilities in Zoom with an average score of 7.3 out of ten. Last year, in 2024 Zoom had 26 security vulnerabilities published. Right now, Zoom is on track to have less security vulnerabilities in 2025 than it did last year. However, the average CVE base score of the vulnerabilities in 2025 is greater by 0.90.




Year Vulnerabilities Average Score
2025 6 7.27
2024 26 6.37
2023 62 7.21
2022 28 7.34
2021 19 7.64
2020 8 7.54
2019 3 7.27
2018 1 9.80

It may take a day or so for new Zoom vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Zoom Security Vulnerabilities

Buffer overflow in some Zoom Apps may

CVE-2024-45421 8.8 - High - February 25, 2025

Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.

Business logic error in some Zoom Workplace Apps may

CVE-2024-45424 7.5 - High - February 25, 2025

Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access.

Incorrect user management in some Zoom Workplace Apps may

CVE-2024-45425 6.5 - Medium - February 25, 2025

Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.

Incorrect ownership assignment in some Zoom Workplace Apps may

CVE-2024-45426 6.5 - Medium - February 25, 2025

Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.

Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may

CVE-2024-45417 5.5 - Medium - February 25, 2025

Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access.

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may

CVE-2024-45418 8.8 - High - February 25, 2025

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.

Zoom Apps Information Disclosure Vulnerability

CVE-2024-45419 - November 19, 2024

Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.

Zoom Apps Uncontrolled Resource Consumption Denial of Service Vulnerability

CVE-2024-45420 - November 19, 2024

Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access.

Zoom Apps: Improper Input Validation Leading to Denial of Service

CVE-2024-45422 - November 19, 2024

Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access.

Protection mechanism failure for some Zoom Workplace Apps and SDKs may

CVE-2024-39818 6.5 - Medium - August 14, 2024

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.

Insufficiently Protected Credentials

Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may

CVE-2024-39822 6.5 - Medium - August 14, 2024

Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may

CVE-2024-39823 4.9 - Medium - August 14, 2024

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may

CVE-2024-39824 4.9 - Medium - August 14, 2024

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Buffer overflow in some Zoom Workplace Apps and Rooms Clients may

CVE-2024-39825 8.5 - High - August 14, 2024

Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.

Memory Corruption

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may

CVE-2024-42434 4.9 - Medium - August 14, 2024

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may

CVE-2024-42435 4.9 - Medium - August 14, 2024

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may

CVE-2024-42436 6.5 - Medium - August 14, 2024

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

Memory Corruption

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may

CVE-2024-42437 6.5 - Medium - August 14, 2024

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

Memory Corruption

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may

CVE-2024-42438 6.5 - Medium - August 14, 2024

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

Memory Corruption

Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may

CVE-2024-42439 6.5 - Medium - August 14, 2024

Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access.

Untrusted Path

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may

CVE-2024-42440 6.7 - Medium - August 14, 2024

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may

CVE-2024-42441 6.7 - Medium - August 14, 2024

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may

CVE-2024-24693 5.5 - Medium - March 13, 2024

Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.

Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may

CVE-2024-24692 4.7 - Medium - March 13, 2024

Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.

TOCTTOU

Improper input validation in some Zoom clients may

CVE-2024-24690 6.5 - Medium - February 14, 2024

Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.

Improper Validation of Specified Quantity in Input

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may

CVE-2024-24691 9.8 - Critical - February 14, 2024

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may

CVE-2024-24695 6.5 - Medium - February 14, 2024

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access.

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may

CVE-2024-24696 6.5 - Medium - February 14, 2024

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access.

Untrusted search path in some Zoom 32 bit Windows clients may

CVE-2024-24697 7.8 - High - February 14, 2024

Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access.

Untrusted Path

Improper authentication in some Zoom clients may

CVE-2024-24698 4.4 - Medium - February 14, 2024

Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.

Business logic error in some Zoom clients may

CVE-2024-24699 6.5 - Medium - February 14, 2024

Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.

Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may

CVE-2023-49647 7.8 - High - January 12, 2024

Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access.

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may

CVE-2023-43586 8.8 - High - December 13, 2023

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.

Directory traversal

Improper authentication in some Zoom clients before version 5.16.5 may

CVE-2023-49646 6.5 - Medium - December 13, 2023

Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.

authentification

Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may

CVE-2023-43585 6.5 - Medium - December 13, 2023

Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access.

Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may

CVE-2023-43583 4.9 - Medium - December 13, 2023

Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow a privileged user to conduct a disclosure of information via network access.

Insufficient control flow management in some Zoom clients may

CVE-2023-43588 6.5 - Medium - November 15, 2023

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.

Improper authorization in some Zoom clients may

CVE-2023-43582 8.8 - High - November 15, 2023

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

authentification

Link following in Zoom Rooms for macOS before version 5.16.0 may

CVE-2023-43590 7.8 - High - November 15, 2023

Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.

insecure temporary file

Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may

CVE-2023-43591 7.8 - High - November 15, 2023

Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.

Buffer overflow in some Zoom clients may

CVE-2023-39204 7.5 - High - November 14, 2023

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

Classic Buffer Overflow

Buffer overflow in some Zoom clients may

CVE-2023-39206 7.5 - High - November 14, 2023

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

Classic Buffer Overflow

Improper conditions check in Zoom Team Chat for Zoom clients may

CVE-2023-39205 6.5 - Medium - November 14, 2023

Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access.

Improper Check for Unusual or Exceptional Conditions

Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may

CVE-2023-39202 5.5 - Medium - November 14, 2023

Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access.

Untrusted Path

Cryptographic issues with In-Meeting Chat for some Zoom clients may

CVE-2023-39199 6.5 - Medium - November 14, 2023

Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access.

Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may

CVE-2023-39203 7.5 - High - November 14, 2023

Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network access.

Improper authentication in Zoom clients may

CVE-2023-39215 6.5 - Medium - September 12, 2023

Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.

authentification

Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may

CVE-2023-39208 7.5 - High - September 12, 2023

Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of service via network access.

Improper Input Validation

Untrusted search path in CleanZoom before file date 07/24/2023 may

CVE-2023-39201 6.7 - Medium - September 12, 2023

Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local access.

Untrusted Path

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may

CVE-2023-39214 8.1 - High - August 08, 2023

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.

Exposure of Resource to Wrong Sphere

Built by Foundeo Inc., with data from the National Vulnerability Database (NVD). Privacy Policy. Use of this site is governed by the Legal Terms
Disclaimer
CONTENT ON THIS WEBSITE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. Always check with your vendor for the most up to date, and accurate information.