Log in Start free

Zoom Communications

Products

ProductCVEsExploitedLatest
Zoom Workplace6–Oct 13, 2026
Zoom Clients6–Oct 13, 2026
Zoom Rooms2–Jul 16, 2026
Zoom Workplace VDI Plugin2–Jul 16, 2026
Zoom VDI1–Aug 11, 2026
Remote Control for Zoom Contact Center1–Jun 12, 2026
Zoom Workplace for Windows1–Jul 16, 2026

Exploited and recent CVEs

  • CVE-2026-108185 High 7.4 Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access. 0.2%
  • CVE-2026-108184 High 7.4 Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access. 0.2%
  • CVE-2026-53420 High 8.0 Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access. 0.3%
  • CVE-2026-53418 High 8.1 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access. 0.3%
  • CVE-2026-53416 High 7.1 Zoom VDI - Path Traversal 0.2%
  • CVE-2026-53415 High 8.3 Zoom Clients - Use After Free 0.5%
  • CVE-2026-53414 Medium 6.5 Zoom Clients - Buffer Over-read 0.4%
  • CVE-2026-53413 High 8.3 Zoom Clients - Buffer Over-write 0.5%
  • CVE-2026-53412 Critical 9.8 Zoom Workplace VDI Plugin for Windows - Improper Input Validation 0.5%
  • CVE-2026-53411 High 7.8 Zoom Workplace VDI Plugin for Windows - Improper Input Validation 0.1%
  • CVE-2026-53410 High 7.0 Zoom Clients for Windows - Race Condition 0.1%
  • CVE-2026-53409 High 7.8 Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access. 0.2%
  • CVE-2026-53408 High 8.1 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privil 0.2%
  • CVE-2026-53407 High 8.1 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privil 0.2%
  • CVE-2026-53406 High 7.8 Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local <0.1%
  • CVE-2026-30906 High 7.8 Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access. 0.1%
  • CVE-2026-30905 High 7.8 External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local 0.1%
  • CVE-2026-30904 Low 1.8 Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access. 0.1%
  • CVE-2026-30903 Critical 9.6 External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access. 0.4%