What’s Vulnerable › Products

Zoom Workplace vulnerabilities

44 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 32 published in the last 12 months.

Check whether your Zoom Workplace version is affected

Latest Zoom Workplace vulnerabilities

• CVE-2026-53420 — (CVSS 8.0)
• CVE-2026-53418 — (CVSS 8.1)
• CVE-2026-53408 — (CVSS 8.1)
• CVE-2026-53407 — (CVSS 9.8)
• CVE-2026-30904 — (CVSS 4.3)
• CVE-2025-62484 — Zoom Workplace Clients - Inefficient Regular Expression Complexity (CVSS 9.8)
• CVE-2025-64741 — Zoom Workplace for Android - Improper Authorization Handling (CVSS 9.8)
• CVE-2025-49461 — Zoom Workplace Clients - Cross-site Scripting (CVSS 7.4)
• CVE-2025-49460 — Zoom Workplace Clients - Argument Injection (CVSS 7.5)
• CVE-2025-46786 — Zoom Workplace Apps - Cross-site Scripting (CVSS 6.1)
• CVE-2025-30668 — Zoom Workplace Apps - NULL Pointer Dereference (CVSS 6.5)
• CVE-2025-30667 — Zoom Workplace Apps - NULL Pointer Dereference (CVSS 6.5)
• CVE-2025-30664 — Zoom Workplace Apps - Cross-site Scripting (CVSS 8.2)
• CVE-2025-30663 — Zoom Workplace Apps - Time-of-check Time-of-use (CVSS 7.0)
• CVE-2025-27442 — Zoom Workplace Apps - Cross Site Scripting (CVSS 5.2)
• CVE-2025-27441 — Zoom Workplace Apps - Cross Site Scripting (CVSS 5.2)
• CVE-2025-27440 — Zoom Apps - Heap-based Buffer Overflow (CVSS 8.8)
• CVE-2025-27439 — Zoom Apps - Buffer Underflow (CVSS 8.8)
• CVE-2025-0151 — Zoom Apps - Use After Free (CVSS 8.8)
• CVE-2025-0150 — Zoom Workplace Apps for iOS - Incorrect Behavior Order (CVSS 6.5)
• CVE-2025-0149 — Zoom Apps - Insufficient Verification of Data Authenticity (CVSS 7.5)
• CVE-2024-27246 — Zoom Workplace Apps and SDKs - Use After Free (CVSS 6.5)
• CVE-2024-27245 — Zoom Workplace Apps and SDKs - Buffer Overflow (CVSS 6.5)
• CVE-2024-27239 — Zoom Workplace Apps and SDKs - Divide By Zero (CVSS 6.5)
• CVE-2024-45426 — Zoom Workplace Apps - Incorrect Ownership Assignment (CVSS 6.5)