Zoom Communications Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with Zoom Workplace.

Products

Clear product

Showing 4 vulnerabilities on this page for Zoom Workplace

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Zoom Workplace Custom URL Scheme Improper Authorization Leading to Privilege Escalation

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

CWE-939Jun 12, 2026
CVSS8.1v3.1EPSS0.211%PoCs0SignalsSTIX

Zoom Workplace Custom URL Scheme Improper Authorization

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

CWE-939Jun 12, 2026
CVSS8.1v3.1EPSS0.231%PoCs0SignalsSTIX

Zoom Workplace for iOS Protection Mechanism Failure Information Disclosure via Physical Access

Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access.

CWE-693May 13, 2026
CVSS1.8v3.1EPSS0.143%PoCs0SignalsSTIX

Zoom Workplace for Windows Mail Feature External Control of File Name or Path Privilege Escalation

External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.

CWE-610CWE-73Mar 11, 2026
CVSS9.6v3.1EPSS0.328%PoCs0SignalsSTIX