How many Zoom Zoom Desktop Client for Windows CVEs are in CISA KEV?

None of Zoom Zoom Desktop Client for Windows's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Zoom Zoom Desktop Client for Windows are affected?

5 distinct Zoom Zoom Desktop Client for Windows versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Zoom Zoom Desktop Client for Windows CVEs?

Zoom Zoom Desktop Client for Windows's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-345 (Insufficient Verification of Data Authenticity), CWE-347 (Improper Verification of Cryptographic Signature), CWE-426 (Untrusted Search Path).

How many critical Zoom Zoom Desktop Client for Windows vulnerabilities are there?

Zoom Zoom Desktop Client for Windows has 2 critical and 4 high-severity CVEs.

What is the average severity of Zoom Zoom Desktop Client for Windows CVEs?

The average CVSS base score across Zoom Zoom Desktop Client for Windows's scored CVEs is 8.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Zoom

7 CVEs

Zoom Desktop Client for Windows Vulnerabilities

Name: Zoom Desktop Client for Windows vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Zoom Desktop Client for Windows by Zoom.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.5

Avg CVSS

2023–2024

Last updated April 9, 2024

Overview

Zoom Desktop Client for Windows has 7 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Zoom Desktop Client for Windows, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of Zoom Desktop Client for Windows's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High4

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Zoom Desktop Client for Windows's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Zoom Desktop Client for Windows CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Zoom Desktop Client for Windows version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 5.14.52 CVEs
< 5.14.72 CVEs
< 5.15.01 CVE
< 5.15.51 CVE
>= before version 5.17.101 CVE

Find a version

7 CVEs

Sort

High vulnerability · 2024-04-09
CVE-2024-24694
Patch
CWE-347
High · CVSS 7.8
EPSS 0.2% (5th pct)2024-04-09
Medium vulnerability · 2023-08-08
CVE-2023-39209
Patch
CWE-449
Medium · CVSS 6.5
EPSS 0.8% (53th pct)2023-08-08
Critical vulnerability · 2023-08-08
CVE-2023-39216
Patch
CWE-80
Critical · CVSS 9.8
EPSS 1.1% (61th pct)2023-08-08
Critical vulnerability · 2023-08-08
CVE-2023-36534
Patch
CWE-22
Critical · CVSS 9.8
EPSS 1.4% (70th pct)2023-08-08
High vulnerability · 2023-08-08
CVE-2023-36541
Patch
CWE-345
High · CVSS 8.8
EPSS 0.5% (37th pct)2023-08-08
High vulnerability · 2023-08-08
CVE-2023-36540
Patch
CWE-426
High · CVSS 7.8
EPSS 0.3% (21th pct)2023-08-08
High vulnerability · 2023-07-11
CVE-2023-34116
Patch
CWE-78
High · CVSS 8.8
EPSS 1.0% (58th pct)2023-07-11

Common weakness types

The CWE weakness categories most often found in Zoom Desktop Client for Windows CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Zoom Desktop Client for Windows CVEs were published each year.

2023

6

2024

1

Other Zoom products

Browse vulnerabilities for other products by Zoom.

rooms107 CVEs meeting software development kit84 CVEs workplace desktop75 CVEs zoom64 CVEs workplace virtual desktop infrastructure57 CVEs rooms controller44 CVEs workplace42 CVEs meetings37 CVEs

All Zoom vulnerabilities

Frequently asked questions

Common questions about Zoom Desktop Client for Windows vulnerabilities.

How many CVEs does Zoom Zoom Desktop Client for Windows have?: Zoom Zoom Desktop Client for Windows has 7 published CVE records since 2023.
How many Zoom Zoom Desktop Client for Windows CVEs are in CISA KEV?: None of Zoom Zoom Desktop Client for Windows's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Zoom Zoom Desktop Client for Windows vulnerabilities?: No Zoom Zoom Desktop Client for Windows CVEs currently have a tracked public exploit in this dataset.
Which versions of Zoom Zoom Desktop Client for Windows are affected?: 5 distinct Zoom Zoom Desktop Client for Windows versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Zoom Zoom Desktop Client for Windows CVEs?: Zoom Zoom Desktop Client for Windows's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-345 (Insufficient Verification of Data Authenticity), CWE-347 (Improper Verification of Cryptographic Signature), CWE-426 (Untrusted Search Path).
How many critical Zoom Zoom Desktop Client for Windows vulnerabilities are there?: Zoom Zoom Desktop Client for Windows has 2 critical and 4 high-severity CVEs.
What is the average severity of Zoom Zoom Desktop Client for Windows CVEs?: The average CVSS base score across Zoom Zoom Desktop Client for Windows's scored CVEs is 8.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Zoom Desktop Client for Windows vulnerabilities

Monitor new Zoom Desktop Client for Windows vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing