| CVE-2025-64739 | ALTO7.5 | External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access. | 13/11/2025 |
| CVE-2025-62483 | ALTO7.5 | Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access. | 13/11/2025 |
| CVE-2025-58135 | MEDIO6.5 | Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access. | 09/09/2025 |
| CVE-2025-58134 | MEDIO4.3 | Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access. | 09/09/2025 |
| CVE-2025-49461 | ALTO7.4 | Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. | 09/09/2025 |
| CVE-2025-49460 | ALTO7.5 | Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. | 09/09/2025 |
| CVE-2025-49458 | MEDIO6.5 | Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access. | 09/09/2025 |
| CVE-2025-49457 | ALTO8.8 | Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access | 12/08/2025 |
| CVE-2025-49456 | MEDIO5.1 | Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access. | 12/08/2025 |
| CVE-2025-46786 | MEDIO6.1 | Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access. | 14/05/2025 |
| CVE-2025-46785 | MEDIO6.5 | Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. | 14/05/2025 |
| CVE-2025-30668 | MEDIO6.5 | Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access. | 14/05/2025 |
| CVE-2025-30667 | MEDIO6.5 | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. | 14/05/2025 |
| CVE-2025-30666 | MEDIO6.5 | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. | 14/05/2025 |
| CVE-2025-30665 | MEDIO6.5 | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. | 14/05/2025 |
| CVE-2025-30664 | ALTO8.2 | Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access. | 14/05/2025 |
| CVE-2025-30663 | ALTO7.0 | Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access. | 14/05/2025 |
| CVE-2025-30671 | MEDIO6.5 | Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. | 08/04/2025 |
| CVE-2025-30670 | MEDIO6.5 | Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. | 08/04/2025 |
| CVE-2025-27443 | MEDIO5.5 | Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access. | 08/04/2025 |