Zoom
Zoom Meeting Software Development KIT: vulnerabilidades y CVE
Zoom Meeting Software Development KIT tiene 84 vulnerabilidades publicadas, 10 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE84
Últimos 12 meses10
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-53408 | Alta (8.1) | 0.36% | — | 12 jun 2026 | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network… |
| CVE-2026-30900 | Alta (7.8) | 0.16% | — | 11 mar 2026 | Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access. |
| CVE-2025-62484 | Crítica (9.8) | 0.30% | — | 13 nov 2025 | Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access. |
| CVE-2025-64741 | Crítica (9.8) | 0.42% | — | 13 nov 2025 | Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access. |
| CVE-2025-64739 | Alta (7.5) | 0.32% | — | 13 nov 2025 | External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access. |
| CVE-2025-64738 | Media (5.5) | 0.15% | — | 13 nov 2025 | External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access. |
| CVE-2025-62483 | Alta (7.5) | 0.27% | — | 13 nov 2025 | Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access. |
| CVE-2025-62482 | Media (6.1) | 0.19% | — | 13 nov 2025 | Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access. |
| CVE-2025-30669 | Media (6.5) | 0.10% | — | 13 nov 2025 | Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access. |
| CVE-2025-58132 | Media (6.5) | 1.8% | — | 15 oct 2025 | Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access. |
| CVE-2025-58135 | Media (6.5) | 0.26% | — | 9 sept 2025 | Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access. |
| CVE-2025-58134 | Media (4.3) | 0.20% | — | 9 sept 2025 | Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access. |
| CVE-2025-49461 | Alta (7.4) | 0.31% | — | 9 sept 2025 | Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. |
| CVE-2025-49460 | Alta (7.5) | 0.27% | — | 9 sept 2025 | Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. |
| CVE-2025-49458 | Media (6.5) | 0.32% | — | 9 sept 2025 | Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-49457 | Alta (8.8) | 0.62% | — | 12 ago 2025 | Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access |
| CVE-2025-49456 | Media (5.1) | 0.11% | — | 12 ago 2025 | Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access. |
| CVE-2025-46786 | Media (6.1) | 0.29% | — | 14 may 2025 | Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access. |
| CVE-2025-46785 | Media (6.5) | 0.58% | — | 14 may 2025 | Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-30668 | Media (6.5) | 0.55% | — | 14 may 2025 | Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-30667 | Media (6.5) | 0.55% | — | 14 may 2025 | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-30666 | Media (6.5) | 0.55% | — | 14 may 2025 | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-30665 | Media (6.5) | 0.55% | — | 14 may 2025 | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-30664 | Alta (8.2) | 0.27% | — | 14 may 2025 | Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access. |
| CVE-2025-30663 | Alta (7) | 0.15% | — | 14 may 2025 | Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access. |
| CVE-2025-30671 | Media (6.5) | 0.40% | — | 8 abr 2025 | Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-30670 | Media (6.5) | 0.42% | — | 8 abr 2025 | Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-27443 | Media (5.5) | 0.16% | — | 8 abr 2025 | Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access. |
| CVE-2025-27442 | Media (5.2) | 0.24% | — | 8 abr 2025 | Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access. |
| CVE-2025-27441 | Media (5.2) | 0.26% | — | 8 abr 2025 | Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access. |