CVE Database and Vulnerability Search

Browse vendorsBrowse ecosystems

Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.

Vulnerabilities
381,276
with PoCs
37,250
CISA KEV
1,665
Ransomware
606
with Nuclei
4,342
Advanced

Showing 4 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Zoom Workplace Custom URL Scheme Improper Authorization Leading to Privilege Escalation

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

CWE-939Jun 12, 2026
CVSS8.1v3.1EPSS0.211%PoCs0SignalsSTIX

Zoom Workplace Custom URL Scheme Improper Authorization

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

CWE-939Jun 12, 2026
CVSS8.1v3.1EPSS0.231%PoCs0SignalsSTIX

Zoom Workplace for iOS Protection Mechanism Failure Information Disclosure via Physical Access

Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access.

CWE-693May 13, 2026
CVSS1.8v3.1EPSS0.143%PoCs0SignalsSTIX

Zoom Workplace for Windows Mail Feature External Control of File Name or Path Privilege Escalation

External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.

CWE-610CWE-73Mar 11, 2026
CVSS9.6v3.1EPSS0.328%PoCs0SignalsSTIX