Known vulnerabilities in Zoom Workplace Desktop App for Windows 6.5.0 6118

Vendor: Zoom Video Communications, Inc.
Software: Zoom Workplace Desktop App for Windows
Version: 6.5.0 6118
Software CPE: cpe:2.3:a:zoom_video_communications:zoom_client_for_windows:*:*:*:*:*:*:*:*
Website: https://zoom.us/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoom Workplace Desktop App for Windows version 6.5.0 6118 Zoom Workplace Desktop App for Windows 6.5.0 6118 is affected by 8 vulnerabilities: 1 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137492 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-53410		 CWE-367 Low
No
No
 7.0.5 38856 14.07.2026 SB2026071475
#VU123682 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-30903		 CWE-22 High
No
No
 6.6.0 15547 10.03.2026 SB2026031051
#VU123681 - Improper Privilege Management
CVE-2026-30902		 CWE-269 Low
No
No
 6.6.0 15547 10.03.2026 SB2026031050
#VU118251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-62483		 CWE-200 Medium
No
No
 6.5.10 12704 11.11.2025 SB2025111124
#VU118250 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-62482		 CWE-79 Medium
No
No
 6.5.10 12704 11.11.2025 SB2025111123
#VU118248 - Improper Certificate Validation
CVE-2025-30669		 CWE-295 Medium
No
No
 6.5.10 12704 11.11.2025 SB2025111121
#VU118245 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-64739		 CWE-22 Medium
No
No
 6.5.10 12704 11.11.2025 SB2025111118
#VU116990 - Command injection
CVE-2025-58132		 CWE-77 Medium
No
No
 6.5.5 8927 14.10.2025 SB2025101453