Vendor
Zoom Video Communications, Inc.
117 known vulnerabilities in products by Zoom Video Communications, Inc., 0 of them actively exploited (CISA KEV).
Key figures
117
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-22784 | Improper XML Parsing in Zoom Client for Meetings | 8.1 | |
| Critical | CVE-2024-24691 | Zoom Clients for Windows: Improper Handling of Unicode Encoding | 9.6 | |
| Critical | CVE-2021-34423 | Buffer overflow in Zoom client and other products | 7.3 | |
| Critical | CVE-2023-36534 | Zoom Desktop Client for Windows: Path Traversal | 9.3 | |
| High | CVE-2022-22787 | Insufficient hostname validation during Clusterswitch message in Zoom Client for Meetings | 5.9 | |
| Critical | CVE-2023-39213 | Zoom Desktop Client for Windows and Zoom VDI Client: Improper Handling of Unicode Encoding | 9.6 | |
| Critical | CVE-2022-22785 | Improperly constrained session cookies in Zoom Client for Meetings | 5.9 | |
| Critical | CVE-2022-28750 | Zoom On-Premise Deployments: Stack Buffer Overflow in Meeting Connector | 7.5 | |
| Critical | CVE-2022-28763 | Improper URL parsing in Zoom Clients | 8.8 | |
| Critical | CVE-2023-39216 | Zoom Desktop Client for Windows: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 9.6 | |
| Medium | CVE-2024-24699 | Zoom Clients - Business Logic Error | 6.5 | |
| High | CVE-2022-22786 | Update package downgrade in Zoom Client for Meetings for Windows | 7.5 | |
| High | CVE-2022-22788 | DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients | 7.1 | |
| High | CVE-2023-36532 | Zoom Clients: Heap-based Buffer Overflow | 5.9 | |
| High | CVE-2021-34417 | Authenticated remote command execution with root privileges via web console in MMR | 7.9 | |
| Critical | CVE-2021-34422 | Path traversal of file names in Keybase Client for Windows | 7.2 | |
| High | CVE-2023-36535 | Zoom Clients: The UI Performs the Wrong Action | 7.1 | |
| Critical | CVE-2022-28755 | Improper URL parsing in Zoom Clients | 9.6 | |
| High | CVE-2023-39217 | Zoom SDK's: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 5.3 | |
| High | CVE-2021-34424 | Process memory exposure in Zoom Client and other products | 5.3 | |
| High | CVE-2023-28601 | Zoom for Windows Client: Improperly Implemented Security Check for Standard | 8.3 | |
| High | CVE-2023-34116 | Zoom Desktop Client for Windows: OS Command Injection | 8.2 | |
| High | CVE-2023-39215 | Zoom Clients: The UI Performs the Wrong Action | 7.1 | |
| High | CVE-2023-43586 | Zoom Clients for Windows: Untrusted Search Path | 7.3 | |
| Medium | CVE-2022-22780 | Zoom Chat Susceptible to Zip Bombing | 4.7 |