Browse all 52 CVE security advisories affecting Zoom Video Communications Inc. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Zoom Video Communications Inc operates a cloud-based video conferencing platform that facilitates remote communication for businesses and individuals. With 52 recorded CVEs, its historical vulnerability landscape has predominantly featured remote code execution (RCE) and cross-site scripting (XSS) flaws, often stemming from improper input validation in its client applications or web interfaces. Privilege escalation vulnerabilities have also been documented, allowing unauthorized access to sensitive meeting data or system resources. Notable incidents include the "Zoombombing" phenomenon, which highlighted significant privacy and access control weaknesses in early versions, prompting extensive security overhauls. While Zoom has since implemented end-to-end encryption and enhanced authentication measures, the persistent presence of RCE vulnerabilities in its desktop clients remains a critical concern for enterprise security teams, necessitating rigorous patch management and configuration audits to mitigate potential exploitation risks.
This page lists every published CVE security advisory associated with Zoom Video Communications Inc. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.