Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Zoom Communications, Inc — Vulnerabilities & Security Advisories 49

Browse all 49 CVE security advisories affecting Zoom Communications, Inc. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Zoom Communications, Inc. operates as a leading provider of video-first unified communications platform, enabling enterprise-grade virtual meetings, messaging, and collaboration services globally. The company’s software infrastructure has historically been associated with forty-nine recorded Common Vulnerabilities and Exposures (CVEs), predominantly involving remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from complex client-server interactions and third-party dependencies within its desktop and mobile applications. Notable security incidents include early "Zoom-bombing" disruptions that prompted rapid policy updates and encryption enhancements. While the platform has significantly hardened its security posture through end-to-end encryption and improved access controls, the persistent presence of CVEs highlights the ongoing challenges in securing a widely deployed, feature-rich communication tool against sophisticated attack vectors.

CVE ID Title CVSS Severity Published
CVE-2024-45417 Zoom Apps for macOS - Uncontrolled Resource Consumption — Zoom Apps for macOS CWE-708 6.0 Medium 2025-02-25
CVE-2024-45426 Zoom Workplace Apps - Incorrect Ownership Assignment — Zoom Workplace Apps CWE-708 4.9 Medium 2025-02-25
CVE-2024-45425 Zoom Workplace Apps - Incorrect User Management — Zoom Workplace Apps CWE-286 4.9 Medium 2025-02-25
CVE-2024-45424 Zoom Workplace Apps - Business Logic Error — Zoom Workplace Apps CWE-840 5.3 Medium 2025-02-25
CVE-2025-0148 Zoom Jenkins Marketplace plugin - Missing Password Field Masking — Zoom Jenkins Marketplace plugin CWE-549 2.6 Low 2025-02-03
CVE-2025-0147 Zoom Workplace App for Linux - Type Confusion — Zoom Workplace App for Linux CWE-843 8.8 High 2025-01-30
CVE-2025-0146 Zoom Workplace app for macOS - Symlink Following — Zoom Workplace app for macOS CWE-59 3.9 Low 2025-01-30
CVE-2025-0145 Zoom Workplace Apps for Windows - Untrusted Search Path — Zoom Workplace Apps for Windows CWE-426 4.6 Medium 2025-01-30
CVE-2025-0144 Zoom Workplace Apps - Out-of-bounds Write — Zoom Workplace Apps CWE-787 3.1 Low 2025-01-30
CVE-2025-0143 Zoom Workplace Apps for Linux - Out-of-bounds Write — Zoom Workplace Apps for Linux CWE-787 4.3 Medium 2025-01-30
CVE-2025-0142 Zoom Jenkins Marketplace plugin - Cleartext Storage of Sensitive Information — Zoom Jenkins Marketplace plugin CWE-312 4.3 Medium 2025-01-30
CVE-2024-39821 Zoom Workplace App for Windows and Zoom Rooms App for Windows - Race Condition — Zoom Workplace App for Windows and Zoom Rooms App for Windows CWE-367 6.6 Medium 2024-07-15
CVE-2024-39820 Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element — Zoom Workplace Desktop App for macOS CWE-427 6.6 Medium 2024-07-15
CVE-2024-39819 Zoom Workplace Apps and SDK for Windows - Improper Privilege Management — Zoom Workplace Apps and SDK for Windows CWE-494 6.7 Medium 2024-07-15
CVE-2024-39827 Zoom Workplace Desktop App for Windows - Improper Input Validation — Zoom Workplace Desktop App for Windows CWE-20 5.5 Medium 2024-07-15
CVE-2024-39826 Zoom Workplace Apps and SDKs - Path traversal — Zoom Workplace Apps and SDKs CWE-367 6.8 Medium 2024-07-15
CVE-2024-27238 Zoom Apps and SDKs - Race Condition — Zoom Apps and SDKs CWE-367 7.1 High 2024-07-15
CVE-2024-27241 Zoom Apps and SDKs - Improper Input Validation — Zoom Apps and SDKs CWE-20 5.3 Medium 2024-07-15
CVE-2024-27240 Zoom Apps for Windows - Improper Input Validation — Zoom Apps for Windows CWE-20 7.1 High 2024-07-15

This page lists every published CVE security advisory associated with Zoom Communications, Inc. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.