{"schema_version":1,"title":"Zoom vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 18 vulnerabilities in Zoom: 0 in the last 7 days and 6 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-53416, was published on 11 August 2026. 6 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/zoom","json_url":"https://junglewise.ai/threats/vendors/zoom.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/zoom","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":13,"all_time":18,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":18},"latest":[{"cve":"CVE-2026-53416","cvss":7.1,"epss":0.0021,"slug":"cve-2026-53416-zoom-vdi-client-and-plugins-path-traversal-information-disclosure","title":"Zoom VDI Client and Plugins path traversal information disclosure","severity":"high","exploited":false,"published_at":"2026-08-11T16:17:32.96+00:00","url":"https://junglewise.ai/threats/cve-2026-53416-zoom-vdi-client-and-plugins-path-traversal-information-disclosure"},{"cve":"CVE-2026-53415","cvss":8.3,"epss":0.0049,"slug":"cve-2026-53415-zoom-clients-use-after-free-in-annotator-function","title":"Zoom Clients use-after-free in annotator function","severity":"high","exploited":false,"published_at":"2026-08-11T16:17:32.833+00:00","url":"https://junglewise.ai/threats/cve-2026-53415-zoom-clients-use-after-free-in-annotator-function"},{"cve":"CVE-2026-53414","cvss":6.5,"epss":0.0036,"slug":"cve-2026-53414-zoom-clients-buffer-over-read-in-annotator-function","title":"Zoom Clients buffer over-read in annotator function","severity":"medium","exploited":false,"published_at":"2026-08-11T16:17:32.713+00:00","url":"https://junglewise.ai/threats/cve-2026-53414-zoom-clients-buffer-over-read-in-annotator-function"},{"cve":"CVE-2026-53413","cvss":8.3,"epss":0.0049,"slug":"cve-2026-53413-zoom-clients-buffer-overflow-in-annotator-function","title":"Zoom Clients buffer overflow in annotator function","severity":"high","exploited":false,"published_at":"2026-08-11T16:17:32.58+00:00","url":"https://junglewise.ai/threats/cve-2026-53413-zoom-clients-buffer-overflow-in-annotator-function"},{"cve":"CVE-2026-53412","cvss":9.8,"slug":"cve-2026-53412-zoom-workplace-for-windows-improper-input-validation-account","title":"Zoom Workplace for Windows improper input validation account takeover","severity":"critical","exploited":false,"published_at":"2026-07-16T22:17:31.38+00:00","url":"https://junglewise.ai/threats/cve-2026-53412-zoom-workplace-for-windows-improper-input-validation-account"},{"cve":"CVE-2026-53409","cvss":7.8,"slug":"cve-2026-53409-zoom-rooms-for-windows-privilege-escalation","title":"Zoom Rooms for Windows privilege escalation","severity":"high","exploited":false,"published_at":"2026-07-16T21:17:21.253+00:00","url":"https://junglewise.ai/threats/cve-2026-53409-zoom-rooms-for-windows-privilege-escalation"},{"cve":"CVE-2026-53408","cvss":8.1,"slug":"cve-2026-53408-zoom-workplace-improper-authorization-in-custom-url-scheme","title":"Zoom Workplace improper authorization in custom URL scheme handler","severity":"high","exploited":false,"published_at":"2026-06-12T19:16:30.093+00:00","url":"https://junglewise.ai/threats/cve-2026-53408-zoom-workplace-improper-authorization-in-custom-url-scheme"},{"cve":"CVE-2026-53407","cvss":8.1,"slug":"cve-2026-53407-zoom-workplace-improper-authorization-in-custom-url-scheme","title":"Zoom Workplace improper authorization in custom URL scheme handler","severity":"high","exploited":false,"published_at":"2026-06-12T19:16:29.973+00:00","url":"https://junglewise.ai/threats/cve-2026-53407-zoom-workplace-improper-authorization-in-custom-url-scheme"},{"cve":"CVE-2026-53406","cvss":7.8,"slug":"cve-2026-53406-zoom-contact-center-privilege-escalation-in-remote-control-for","title":"Zoom Contact Center privilege escalation in Remote Control for Windows","severity":"high","exploited":false,"published_at":"2026-06-12T18:16:35.457+00:00","url":"https://junglewise.ai/threats/cve-2026-53406-zoom-contact-center-privilege-escalation-in-remote-control-for"},{"cve":"CVE-2026-30906","cvss":7.8,"epss":0.0001,"slug":"cve-2026-30906-zoom-rooms-for-windows-privilege-escalation-in-installer","title":"Zoom Rooms for Windows privilege escalation in installer","severity":"high","exploited":false,"published_at":"2026-05-13T19:17:05.54+00:00","url":"https://junglewise.ai/threats/cve-2026-30906-zoom-rooms-for-windows-privilege-escalation-in-installer"},{"cve":"CVE-2026-30905","cvss":7.8,"epss":0.0002,"slug":"cve-2026-30905-zoom-workplace-vdi-plugin-privilege-escalation-in-windows","title":"Zoom Workplace VDI Plugin privilege escalation in Windows Universal Installer","severity":"high","exploited":false,"published_at":"2026-05-13T19:17:05.367+00:00","url":"https://junglewise.ai/threats/cve-2026-30905-zoom-workplace-vdi-plugin-privilege-escalation-in-windows"},{"cve":"CVE-2026-30904","cvss":1.8,"epss":0.0002,"slug":"cve-2026-30904-zoom-workplace-for-ios-protection-mechanism-failure","title":"Zoom Workplace for iOS protection mechanism failure","severity":"low","exploited":false,"published_at":"2026-05-13T19:17:05.21+00:00","url":"https://junglewise.ai/threats/cve-2026-30904-zoom-workplace-for-ios-protection-mechanism-failure"},{"cve":"CVE-2026-30903","cvss":9.6,"slug":"cve-2026-30903-zoom-workplace-privilege-escalation-in-mail-feature","title":"Zoom Workplace privilege escalation in Mail feature","severity":"critical","exploited":false,"published_at":"2026-03-11T15:16:30.247+00:00","url":"https://junglewise.ai/threats/cve-2026-30903-zoom-workplace-privilege-escalation-in-mail-feature"},{"cve":"CVE-2026-30902","cvss":7.8,"slug":"cve-2026-30902-zoom-clients-for-windows-privilege-escalation","title":"Zoom Clients for Windows privilege escalation","severity":"high","exploited":false,"published_at":"2026-03-11T15:16:30.103+00:00","url":"https://junglewise.ai/threats/cve-2026-30902-zoom-clients-for-windows-privilege-escalation"},{"cve":"CVE-2026-30901","cvss":7,"slug":"cve-2026-30901-zoom-rooms-for-windows-privilege-escalation-in-kiosk-mode","title":"Zoom Rooms for Windows privilege escalation in Kiosk Mode","severity":"high","exploited":false,"published_at":"2026-03-11T15:16:29.953+00:00","url":"https://junglewise.ai/threats/cve-2026-30901-zoom-rooms-for-windows-privilege-escalation-in-kiosk-mode"},{"cve":"CVE-2026-30900","cvss":7.8,"slug":"cve-2026-30900-zoom-workplace-for-windows-privilege-escalation-in-update","title":"Zoom Workplace for Windows privilege escalation in update functionality","severity":"high","exploited":false,"published_at":"2026-03-11T15:16:29.787+00:00","url":"https://junglewise.ai/threats/cve-2026-30900-zoom-workplace-for-windows-privilege-escalation-in-update"},{"cve":"CVE-2025-67461","cvss":5,"epss":0.0014,"slug":"cve-2025-67461-external-control-of-file-name-or-path-in-zoom-rooms-for-macos","title":"External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure o","severity":"medium","exploited":false,"published_at":"2025-12-10T21:16:09.797+00:00","url":"https://junglewise.ai/threats/cve-2025-67461-external-control-of-file-name-or-path-in-zoom-rooms-for-macos"},{"cve":"CVE-2025-67460","cvss":7.8,"epss":0.0016,"slug":"cve-2025-67460-protection-mechanism-failure-of-software-downgrade-in-zoom-rooms","title":"Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an es","severity":"high","exploited":false,"published_at":"2025-12-10T21:16:09.633+00:00","url":"https://junglewise.ai/threats/cve-2025-67460-protection-mechanism-failure-of-software-downgrade-in-zoom-rooms"}],"vendor":{"hub":true,"name":"Zoom","slug":"zoom","homepage":"https://zoom.us/","description":"Zoom is a technology company that provides a communications platform for video, voice, content sharing, and chat.","url":"https://junglewise.ai/threats/vendors/zoom"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":1,"exploited":0,"vulnerabilities":2},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-53412","cvss":9.8,"slug":"cve-2026-53412-zoom-workplace-for-windows-improper-input-validation-account","title":"Zoom Workplace for Windows improper input validation account takeover","severity":"critical","exploited":false,"published_at":"2026-07-16T22:17:31.38+00:00","url":"https://junglewise.ai/threats/cve-2026-53412-zoom-workplace-for-windows-improper-input-validation-account"},{"cve":"CVE-2026-30903","cvss":9.6,"slug":"cve-2026-30903-zoom-workplace-privilege-escalation-in-mail-feature","title":"Zoom Workplace privilege escalation in Mail feature","severity":"critical","exploited":false,"published_at":"2026-03-11T15:16:30.247+00:00","url":"https://junglewise.ai/threats/cve-2026-30903-zoom-workplace-privilege-escalation-in-mail-feature"},{"cve":"CVE-2026-53415","cvss":8.3,"epss":0.0049,"slug":"cve-2026-53415-zoom-clients-use-after-free-in-annotator-function","title":"Zoom Clients use-after-free in annotator function","severity":"high","exploited":false,"published_at":"2026-08-11T16:17:32.833+00:00","url":"https://junglewise.ai/threats/cve-2026-53415-zoom-clients-use-after-free-in-annotator-function"},{"cve":"CVE-2026-53413","cvss":8.3,"epss":0.0049,"slug":"cve-2026-53413-zoom-clients-buffer-overflow-in-annotator-function","title":"Zoom Clients buffer overflow in annotator function","severity":"high","exploited":false,"published_at":"2026-08-11T16:17:32.58+00:00","url":"https://junglewise.ai/threats/cve-2026-53413-zoom-clients-buffer-overflow-in-annotator-function"},{"cve":"CVE-2026-53408","cvss":8.1,"slug":"cve-2026-53408-zoom-workplace-improper-authorization-in-custom-url-scheme","title":"Zoom Workplace improper authorization in custom URL scheme handler","severity":"high","exploited":false,"published_at":"2026-06-12T19:16:30.093+00:00","url":"https://junglewise.ai/threats/cve-2026-53408-zoom-workplace-improper-authorization-in-custom-url-scheme"},{"cve":"CVE-2026-53407","cvss":8.1,"slug":"cve-2026-53407-zoom-workplace-improper-authorization-in-custom-url-scheme","title":"Zoom Workplace improper authorization in custom URL scheme handler","severity":"high","exploited":false,"published_at":"2026-06-12T19:16:29.973+00:00","url":"https://junglewise.ai/threats/cve-2026-53407-zoom-workplace-improper-authorization-in-custom-url-scheme"},{"cve":"CVE-2025-67460","cvss":7.8,"epss":0.0016,"slug":"cve-2025-67460-protection-mechanism-failure-of-software-downgrade-in-zoom-rooms","title":"Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an es","severity":"high","exploited":false,"published_at":"2025-12-10T21:16:09.633+00:00","url":"https://junglewise.ai/threats/cve-2025-67460-protection-mechanism-failure-of-software-downgrade-in-zoom-rooms"},{"cve":"CVE-2026-30905","cvss":7.8,"epss":0.0002,"slug":"cve-2026-30905-zoom-workplace-vdi-plugin-privilege-escalation-in-windows","title":"Zoom Workplace VDI Plugin privilege escalation in Windows Universal Installer","severity":"high","exploited":false,"published_at":"2026-05-13T19:17:05.367+00:00","url":"https://junglewise.ai/threats/cve-2026-30905-zoom-workplace-vdi-plugin-privilege-escalation-in-windows"},{"cve":"CVE-2026-30906","cvss":7.8,"epss":0.0001,"slug":"cve-2026-30906-zoom-rooms-for-windows-privilege-escalation-in-installer","title":"Zoom Rooms for Windows privilege escalation in installer","severity":"high","exploited":false,"published_at":"2026-05-13T19:17:05.54+00:00","url":"https://junglewise.ai/threats/cve-2026-30906-zoom-rooms-for-windows-privilege-escalation-in-installer"},{"cve":"CVE-2026-53409","cvss":7.8,"slug":"cve-2026-53409-zoom-rooms-for-windows-privilege-escalation","title":"Zoom Rooms for Windows privilege escalation","severity":"high","exploited":false,"published_at":"2026-07-16T21:17:21.253+00:00","url":"https://junglewise.ai/threats/cve-2026-53409-zoom-rooms-for-windows-privilege-escalation"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[{"name":"Zoom Rooms","slug":"rooms","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/rooms"},{"name":"Zoom Workplace","slug":"workplace","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/workplace"},{"name":"Zoom Meeting SDK","slug":"meeting-sdk","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/meeting-sdk"},{"name":"Zoom Workplace VDI Client","slug":"workplace-vdi-client","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/workplace-vdi-client"},{"name":"Zoom Workplace VDI Client for Windows","slug":"workplace-vdi-client-for-windows","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/workplace-vdi-client-for-windows"},{"name":"Zoom Video SDK","slug":"zoom-video-sdk","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/zoom-video-sdk"}]}