Known vulnerabilities in Zoom Workplace App for iOS 6.1.11 17695

Version: 6.1.11 17695
Software CPE: cpe:2.3:a:zoom_video_communications:zoom_client_for_ios:*:*:*:*:*:*:*:*
Total vulnerabilities: 24
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoom Workplace App for iOS version 6.1.11 17695 Zoom Workplace App for iOS 6.1.11 17695 is affected by 24 vulnerabilities: 6 high, 7 medium, 11 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131146 - Protection Mechanism Failure
CVE-2026-30904
CWE-693 Low
No
No
7.0.0 33632 12.05.2026 SB2026051256
#VU118252 - Inefficient Regular Expression Complexity
CVE-2025-62484
CWE-1333 High
No
No
6.5.10 27510 11.11.2025 SB2025111125
#VU114991 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49461
CWE-79 Low
No
No
6.5.0 25622 09.09.2025 SB2025090906
#VU114990 - Argument Injection or Modification
CVE-2025-49460
CWE-88 Medium
No
No
6.5.0 25622 09.09.2025 SB2025090905
#VU112514 - Insufficient Control Flow Management
CVE-2025-49463
CWE-691 Medium
No
No
6.4.5 24064 08.07.2025 SB2025070857
#VU112512 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49462
CWE-79 Medium
No
No
6.4.5 24064 08.07.2025 SB2025070855
#VU109406 - Improper input validation
CVE-2025-46787
CWE-20 Medium
No
No
6.4.0 19.05.2025 SB2025051313
#VU109009 - Improper input validation
CVE-2025-46786
CWE-20 Medium
No
No
6.4.0 13.05.2025 SB2025051313
#VU109007 - NULL Pointer Dereference
CVE-2025-30668
CWE-476 Low
No
No
6.4.0 13.05.2025 SB2025051313
#VU109006 - NULL Pointer Dereference
CVE-2025-30667
CWE-476 Low
No
No
6.4.0 13.05.2025 SB2025051313
#VU109003 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-30664
CWE-78 Low
No
No
6.4.0 13.05.2025 SB2025051313
#VU109001 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-30663
CWE-362 Low
No
No
6.4.0 13.05.2025 SB2025051313
#VU107149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27442
CWE-79 Medium
No
No
6.3.10 22381 08.04.2025 SB2025040838
#VU107148 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27441
CWE-79 Medium
No
No
6.3.10 22381 08.04.2025 SB2025040838
#VU105776 - Insufficient Verification of Data Authenticity
CVE-2025-0149
CWE-345 Low
No
No
6.3.0 20766 17.03.2025 SB2025031735
#VU105775 - Incorrect Behavior Order
CVE-2025-0150
CWE-696 Low
No
No
6.3.0 20766 17.03.2025 SB2025031734
#VU105774 - Use After Free
CVE-2025-0151
CWE-416 High
No
No
6.3.0 20766 17.03.2025 SB2025031733
#VU105773 - Buffer Underwrite ('Buffer Underflow')
CVE-2025-27439
CWE-124 High
No
No
6.3.0 20766 17.03.2025 SB2025031732
#VU105772 - Heap-based Buffer Overflow
CVE-2025-27440
CWE-122 High
No
No
6.3.0 20766 17.03.2025 SB2025031730
#VU105767 - Out-of-bounds write
CVE-2025-0144
CWE-787 Low
No
No
6.2.5 18677 17.03.2025 SB2025031724


Showing elements 1 - 20 out of 24