Zoom vulnerabilities
We track 83 vulnerabilities in Zoom products across 19 products. 83 are rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2026.
Latest Zoom vulnerabilities
- 9.1 Critical severity
Zoom Client for Meetings for Android: Reliance on Cookies without Validation and Integrity Checking
The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains. This issue could be used in a more sophisticated attack to send an unsuspecting users Zoom-sco
- 8.1 High severity
Zoom Client for Meetings for Android: XML Injection
The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. This can allow a malicious user to break out of the current XMPP message context and create a new message co
- 7.5 High severity
Zoom Client for Meetings for MacOS (Standard…: Improper Validation of Integrity Check Value
The Zoom Client for Meetings for MacOS (Standard and for IT Admin) prior to version 5.9.6 failed to properly check the package version during the update process. This could lead to a malicious actor updating an unsuspecting user’s currently installed version t