Product by Zoom Video Communications
Zoom Client SDK for Windows
84 known vulnerabilities in Zoom Client SDK for Windows (Zoom Video Communications), 0 of them actively exploited (CISA KEV).
Key figures
84
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-24691 | Zoom Clients for Windows: Improper Handling of Unicode Encoding | 9.6 | |
| Medium | CVE-2025-58132 | Zoom Clients for Windows - Command Injection | 4.1 | |
| Critical | CVE-2025-49457 | Zoom Clients for Windows - Untrusted Search Path | 9.6 | |
| High | CVE-2023-39217 | Zoom SDK's: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 5.3 | |
| High | CVE-2023-39215 | Zoom Clients: The UI Performs the Wrong Action | 7.1 | |
| High | CVE-2023-43586 | Zoom Clients for Windows: Untrusted Search Path | 7.3 | |
| High | CVE-2023-39214 | Zoom SDK's: Exposed Dangerous Method or Function | 7.6 | |
| Critical | CVE-2025-0147 | Zoom Workplace App for Linux - Type Confusion | 8.8 | |
| High | CVE-2024-45421 | Zoom Apps - Buffer Overflow | 8.5 | |
| High | CVE-2023-36533 | Zoom SDK's: Missing Release of Resource after Effective Lifetime | 7.1 | |
| Medium | CVE-2024-24696 | Zoom Clients for Windows: Improper Input Validation | 6.8 | |
| Critical | CVE-2025-64741 | Zoom Workplace for Android - Improper Authorization Handling | 8.1 | |
| Medium | CVE-2024-24695 | Zoom Clients for Windows: Improper Input Validation | 6.8 | |
| High | CVE-2025-27440 | Zoom Apps - Heap-based Buffer Overflow | 8.5 | |
| High | CVE-2025-27439 | Zoom Apps - Buffer Underflow | 8.5 | |
| High | CVE-2025-0151 | Zoom Apps - Use After Free | 8.5 | |
| High | CVE-2024-45419 | Zoom Apps - Improper Input Validation | 8.1 | |
| High | CVE-2026-53408 | Zoom Workplace: Improper Authorization in Handler for Custom URL Scheme | 8.1 | |
| Medium | CVE-2025-46785 | Zoom Workplace Apps for Windows - Buffer Over-read | 6.5 | |
| Medium | CVE-2025-30668 | Zoom Workplace Apps - NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2025-30667 | Zoom Workplace Apps - NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2025-30666 | Zoom Workplace Apps for Windows - NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2025-30665 | Zoom Workplace Apps for Windows - NULL Pointer Dereference | 6.5 | |
| High | CVE-2023-43585 | Zoom Mobile App for iOS and SDKs for iOS: The UI Performs the Wrong Action | 7.1 | |
| High | CVE-2025-0150 | Zoom Workplace Apps for iOS - Incorrect Behavior Order | 7.1 |