Zoom

This hub aggregates every CVE we track for Zoom. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Zoom.

• CVE-2026-0997Mattermost Zoom Plugin channel preference API lacks authorization checks4.3Feb 16, 2026
• CVE-2026-0998Mattermost Zoom Plugin allows unauthorized meeting creation and post modification via insufficient API access controls4.3Feb 16, 2026
• CVE-2025-49464Zoom Clients for Windows- Classic Buffer Overflow6.5Jul 10, 2025
• CVE-2025-49463Zoom Clients for iOS - Insufficient Control Flow Management6.5Jul 10, 2025
• CVE-2025-49462Zoom Clients - Cross-site Scripting3.5Jul 10, 2025
• CVE-2025-46789Zoom Clients for Windows - Classic Buffer Overflow6.5Jul 10, 2025
• CVE-2024-27242Zoom Desktop Client for Linux - Cross Site Scripting4.1Apr 9, 2024
• CVE-2024-27247Zoom Desktop Client for macOS - Improper Privilege Management5.5Apr 9, 2024
• CVE-2024-24694Zoom Desktop Client for Windows - Improper Privilege Management5.9Apr 9, 2024
• CVE-2024-24691Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation9.6Feb 14, 2024
• CVE-2024-24690Zoom Clients - Improper Input Validation5.4Feb 14, 2024
• CVE-2024-24699Zoom Clients - Business Logic Error6.5Feb 13, 2024
• CVE-2024-24698Zoom Clients - Improper Authentication4.9Feb 13, 2024
• CVE-2024-24697Zoom Clients - Untrusted Search Path7.2Feb 13, 2024
• CVE-2024-24696Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation6.8Feb 13, 2024