Known vulnerabilities in Zoom Workplace App for Android 6.3.6 27137

Version: 6.3.6 27137
Software CPE: cpe:2.3:a:zoom_video_communications:zoom_client_for_android:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoom Workplace App for Android version 6.3.6 27137 Zoom Workplace App for Android 6.3.6 27137 is affected by 10 vulnerabilities: 2 high, 5 medium, 3 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118252 - Inefficient Regular Expression Complexity
CVE-2025-62484
CWE-1333 High
No
No
6.5.10 32613 11.11.2025 SB2025111125
#VU118247 - Improper Authorization
CVE-2025-64741
CWE-285 High
No
No
6.5.10 32613 11.11.2025 SB2025111120
#VU112512 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49462
CWE-79 Medium
No
No
6.4.5 29471 08.07.2025 SB2025070855
#VU109406 - Improper input validation
CVE-2025-46787
CWE-20 Medium
No
No
6.4.0 19.05.2025 SB2025051313
#VU109009 - Improper input validation
CVE-2025-46786
CWE-20 Medium
No
No
6.4.0 13.05.2025 SB2025051313
#VU109006 - NULL Pointer Dereference
CVE-2025-30667
CWE-476 Low
No
No
6.4.0 13.05.2025 SB2025051313
#VU109003 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-30664
CWE-78 Low
No
No
6.4.0 13.05.2025 SB2025051313
#VU109001 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-30663
CWE-362 Low
No
No
6.4.0 13.05.2025 SB2025051313
#VU107149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27442
CWE-79 Medium
No
No
6.3.10 27968 08.04.2025 SB2025040838
#VU107148 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27441
CWE-79 Medium
No
No
6.3.10 27968 08.04.2025 SB2025040838