Zoom Rooms vulnerabilities

CVE-2025-30664 [HIGH] CWE-79 CVE-2025-30664: Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escal Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.

CVE-2025-49461 [HIGH] CWE-79 CVE-2025-49461: Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.

CVE-2024-39819 [HIGH] CWE-494 CVE-2024-39819: Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an auth Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access.

CVE-2024-45426 [MEDIUM] CWE-708 CVE-2024-45426: Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.

CVE-2023-39199 [MEDIUM] CWE-325 CVE-2023-39199: Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to condu Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access.

CVE-2024-24690 [MEDIUM] CWE-1284 CVE-2024-24690: Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial o Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.

CVE-2024-39822 [MEDIUM] CWE-200 CVE-2024-39822: Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controlle Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.

CVE-2024-27246 [MEDIUM] CWE-416 CVE-2024-27246: Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a den Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.

CVE-2024-27239 [MEDIUM] CWE-416 CVE-2024-27239: Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a den Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.

CVE-2024-27245 [MEDIUM] CWE-122 CVE-2024-27245: Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a de Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.

CVE-2024-42437 [MEDIUM] CWE-122 CVE-2024-42437: Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

CVE-2024-42436 [MEDIUM] CWE-122 CVE-2024-42436: Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

CVE-2024-42438 [MEDIUM] CWE-122 CVE-2024-42438: Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

CVE-2025-46785 [MEDIUM] CWE-120 CVE-2025-46785: Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

CVE-2024-45420 [MEDIUM] CWE-400 CVE-2024-45420: Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access.

CVE-2025-49458 [MEDIUM] CWE-120 CVE-2025-49458: Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denia Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access.

CVE-2025-30663 [HIGH] CWE-367 CVE-2025-30663: Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.

CVE-2025-30668 [MEDIUM] CWE-191 CVE-2025-30668: Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.

CVE-2025-30666 [MEDIUM] CWE-476 CVE-2025-30666: NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

CVE-2025-30667 [MEDIUM] CWE-476 CVE-2025-30667: NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.