Known vulnerabilities in Virtual Desktop Infrastructure (VDI)

Vendor: Zoom Video Communications, Inc.
Software: Virtual Desktop Infrastructure (VDI)
Software CPE: cpe:2.3:a:zoom_video_communications:vdi:*:*:*:*:*:*:*:*
Website: https://zoom.us/
Total vulnerabilities: 74
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Virtual Desktop Infrastructure (VDI) Virtual Desktop Infrastructure (VDI) is affected by 74 known vulnerabilities: 12 high, 21 medium, 41 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137492 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-53410		 CWE-367 Low
No
No
 6.5.17.26960, 6.6.14.26970 14.07.2026 SB2026071475
#VU123682 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-30903		 CWE-22 High
No
No
 6.4.17.26900, 6.5.15.26910, 6.6.10.26830 10.03.2026 SB2026031051
#VU123681 - Improper Privilege Management
CVE-2026-30902		 CWE-269 Low
No
No
 6.4.15.26810, 6.5.13.26820, 6.6.10.26830 10.03.2026 SB2026031050
#VU123679 - Missing Support for Integrity Check
CVE-2026-30900		 CWE-353 Low
No
No
 6.6.11.26890 10.03.2026 SB2026031048
#VU118251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-62483		 CWE-200 Medium
No
No
 6.3.14.26600, 6.4.12.26620, 6.5.10.26710 11.11.2025 SB2025111124
#VU118249 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-30662		 CWE-59 Low
No
No
 6.3.14.26600, 6.4.14.26620, 6.5.10.26710 11.11.2025 SB2025111122
#VU118248 - Improper Certificate Validation
CVE-2025-30669		 CWE-295 Medium
No
No
 6.3.14.26600, 6.4.12.26620, 6.5.10.26710 11.11.2025 SB2025111121
#VU118246 - Improper Verification of Cryptographic Signature
CVE-2025-64740		 CWE-347 Low
No
No
 6.3.14.26600, 6.4.12.26620, 6.5.10.26710 11.11.2025 SB2025111119
#VU118245 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-64739		 CWE-22 Medium
No
No
 6.3.14.26600, 6.4.12.26620, 6.5.10.26710 11.11.2025 SB2025111118
#VU116990 - Command injection
CVE-2025-58132		 CWE-77 Medium
No
No
 6.3.15.26750, 6.4.13.26760 14.10.2025 SB2025101453
#VU114993 - Improper Enforcement of Behavioral Workflow
CVE-2025-58135		 CWE-841 Medium
No
No
 6.3.14.26600, 6.4.12.26620 09.09.2025 SB2025090908
#VU114992 - Improper Authorization
CVE-2025-58134		 CWE-285 Medium
No
No
 6.3.14.26600, 6.4.12.26620 09.09.2025 SB2025090907
#VU114991 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49461		 CWE-79 Low
No
No
 6.3.14.26600, 6.4.12.26620 09.09.2025 SB2025090906
#VU114990 - Argument Injection or Modification
CVE-2025-49460		 CWE-88 Medium
No
No
 6.3.14.26600, 6.4.12.26620 09.09.2025 SB2025090905
#VU114988 - Memory corruption
CVE-2025-49458		 CWE-119 Low
No
No
 6.3.14.26600, 6.4.12.26620 09.09.2025 SB2025090903
#VU113833 - Untrusted Search Path
CVE-2025-49457		 CWE-426 Low
No
No
 6.1.16.25750, 6.2.12.25780, 6.3.10.25910 12.08.2025 SB2025081244
#VU113832 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-49456		 CWE-362 Medium
No
No
 6.2.15.26110, 6.3.12.26120 12.08.2025 SB2025081243
#VU113125 - Memory corruption
CVE-2025-49465		 CWE-119 Medium
No
No
 6.1.7, 6.2.15.26110, 6.3.10.25910 22.07.2025 SB2025070866
#VU112510 - Buffer overflow
CVE-2025-46789		 CWE-120 Medium
No
No
 6.2.15.26110, 6.3.12.26120 08.07.2025 SB2025070853
#VU109006 - NULL Pointer Dereference
CVE-2025-30667		 CWE-476 Low
No
No
 6.1.17.25840, 6.2.13.25860, 6.3.10.25910 13.05.2025 SB2025051313


Showing elements 1 - 20 out of 74