CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 11/03/2026 |
| CVE-2026-30901 | 高7.8 | Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access. | 11/03/2026 |
| CVE-2025-67461 | 中5.5 | External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access. | 10/12/2025 |
| CVE-2025-67460 | 高7.8 | Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access. | 10/12/2025 |
| CVE-2025-64739 | 高7.5 | External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access. | 13/11/2025 |
| CVE-2025-62483 | 高7.5 | Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access. | 13/11/2025 |
| CVE-2025-58133 | 高7.5 | Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access. | 15/10/2025 |
| CVE-2025-58132 | 中6.5 | Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access. | 15/10/2025 |
| CVE-2025-58135 | 中6.5 | Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access. | 09/09/2025 |
| CVE-2025-58134 | 中4.3 | Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access. | 09/09/2025 |
| CVE-2025-49461 | 高7.4 | Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. | 09/09/2025 |
| CVE-2025-49460 | 高7.5 | Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. | 09/09/2025 |
| CVE-2025-49458 | 中6.5 | Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access. | 09/09/2025 |
| CVE-2025-49457 | 高8.8 | Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access | 12/08/2025 |
| CVE-2025-49456 | 中5.1 | Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access. | 12/08/2025 |
| CVE-2025-46786 | 中6.1 | Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access. | 14/05/2025 |
| CVE-2025-46785 | 中6.5 | Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. | 14/05/2025 |