Known vulnerabilities in Zoom Workplace Desktop App for Windows 5.13.0 11216

Version: 5.13.0 11216
Software CPE: cpe:2.3:a:zoom_video_communications:zoom_client_for_windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 91
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoom Workplace Desktop App for Windows version 5.13.0 11216 Zoom Workplace Desktop App for Windows 5.13.0 11216 is affected by 91 vulnerabilities: 14 high, 29 medium, 48 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137492 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-53410
CWE-367 Low
No
No
7.0.5 38856 14.07.2026 SB2026071475
#VU123682 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-30903
CWE-22 High
No
No
6.6.0 15547 10.03.2026 SB2026031051
#VU123681 - Improper Privilege Management
CVE-2026-30902
CWE-269 Low
No
No
6.6.0 15547 10.03.2026 SB2026031050
#VU118251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-62483
CWE-200 Medium
No
No
6.5.10 12704 11.11.2025 SB2025111124
#VU118250 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-62482
CWE-79 Medium
No
No
6.5.10 12704 11.11.2025 SB2025111123
#VU118248 - Improper Certificate Validation
CVE-2025-30669
CWE-295 Medium
No
No
6.5.10 12704 11.11.2025 SB2025111121
#VU118245 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-64739
CWE-22 Medium
No
No
6.5.10 12704 11.11.2025 SB2025111118
#VU116990 - Command injection
CVE-2025-58132
CWE-77 Medium
No
No
6.5.5 8927 14.10.2025 SB2025101453
#VU114993 - Improper Enforcement of Behavioral Workflow
CVE-2025-58135
CWE-841 Medium
No
No
6.5.0 2465 09.09.2025 SB2025090908
#VU114992 - Improper Authorization
CVE-2025-58134
CWE-285 Medium
No
No
6.5.0 2465 09.09.2025 SB2025090907
#VU114991 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49461
CWE-79 Low
No
No
6.5.0 2465 09.09.2025 SB2025090906
#VU114990 - Argument Injection or Modification
CVE-2025-49460
CWE-88 Medium
No
No
6.5.0 2465 09.09.2025 SB2025090905
#VU114989 - Missing Authorization
CVE-2025-49459
CWE-862 Low
No
No
6.5.0 2465 09.09.2025 SB2025090904
#VU114988 - Memory corruption
CVE-2025-49458
CWE-119 Low
No
No
6.5.0 2465 09.09.2025 SB2025090903
#VU113833 - Untrusted Search Path
CVE-2025-49457
CWE-426 Low
No
No
6.3.10 59437 12.08.2025 SB2025081244
#VU113832 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-49456
CWE-362 Medium
No
No
6.4.10 2027 12.08.2025 SB2025081243
#VU113125 - Memory corruption
CVE-2025-49465
CWE-119 Medium
No
No
6.4.0 22.07.2025 SB2025070866
#VU112512 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49462
CWE-79 Medium
No
No
6.4.5 1259 08.07.2025 SB2025070855
#VU112510 - Buffer overflow
CVE-2025-46789
CWE-120 Medium
No
No
6.4.5 1259 08.07.2025 SB2025070853
#VU109001 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-30663
CWE-362 Low
No
No
6.4.0 13.05.2025 SB2025051313


Showing elements 1 - 20 out of 91