Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Zoom Communications, Inc — Vulnerabilities & Security Advisories 49

Browse all 49 CVE security advisories affecting Zoom Communications, Inc. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Zoom Communications, Inc. operates as a leading provider of video-first unified communications platform, enabling enterprise-grade virtual meetings, messaging, and collaboration services globally. The company’s software infrastructure has historically been associated with forty-nine recorded Common Vulnerabilities and Exposures (CVEs), predominantly involving remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from complex client-server interactions and third-party dependencies within its desktop and mobile applications. Notable security incidents include early "Zoom-bombing" disruptions that prompted rapid policy updates and encryption enhancements. While the platform has significantly hardened its security posture through end-to-end encryption and improved access controls, the persistent presence of CVEs highlights the ongoing challenges in securing a widely deployed, feature-rich communication tool against sophisticated attack vectors.

Found 15 results / 49 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2025-46786 Zoom Workplace Apps - Cross-site Scripting — Zoom Workplace Apps CWE-79 4.3 Medium 2025-05-14
CVE-2025-46785 Zoom Workplace Apps for Windows - Buffer Over-read — Zoom Workplace Apps CWE-120 6.5 Medium 2025-05-14
CVE-2025-30668 Zoom Workplace Apps - NULL Pointer Dereference — Zoom Workplace Apps CWE-191 6.5 Medium 2025-05-14
CVE-2025-30667 Zoom Workplace Apps - NULL Pointer Dereference — Zoom Workplace Apps CWE-476 6.5 Medium 2025-05-14
CVE-2025-30664 Zoom Workplace Apps - Cross-site Scripting — Zoom Workplace Apps CWE-79 6.6 Medium 2025-05-14
CVE-2025-30663 Zoom Workplace Apps - Time-of-check Time-of-use — Zoom Workplace Apps CWE-367 8.8 High 2025-05-14
CVE-2025-27442 Zoom Workplace Apps - Cross Site Scripting — Zoom Workplace Apps CWE-79 4.6 Medium 2025-04-08
CVE-2025-27441 Zoom Workplace Apps - Cross Site Scripting — Zoom Workplace Apps CWE-79 4.6 Medium 2025-04-08
CVE-2025-27440 Zoom Apps - Heap-based Buffer Overflow — Zoom Workplace Apps CWE-124 8.5 High 2025-03-11
CVE-2025-27439 Zoom Apps - Buffer Underflow — Zoom Workplace Apps CWE-124 8.5 High 2025-03-11
CVE-2025-0151 Zoom Apps - Use After Free — Zoom Workplace Apps CWE-416 8.5 High 2025-03-11
CVE-2024-45426 Zoom Workplace Apps - Incorrect Ownership Assignment — Zoom Workplace Apps CWE-708 4.9 Medium 2025-02-25
CVE-2024-45425 Zoom Workplace Apps - Incorrect User Management — Zoom Workplace Apps CWE-286 4.9 Medium 2025-02-25
CVE-2024-45424 Zoom Workplace Apps - Business Logic Error — Zoom Workplace Apps CWE-840 5.3 Medium 2025-02-25
CVE-2025-0144 Zoom Workplace Apps - Out-of-bounds Write — Zoom Workplace Apps CWE-787 3.1 Low 2025-01-30

This page lists every published CVE security advisory associated with Zoom Communications, Inc. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.