Known vulnerabilities in Zoom Rooms Client for Windows 5.13.6 2407

Vendor: Zoom Video Communications, Inc.
Software: Zoom Rooms Client for Windows
Version: 5.13.6 2407
Software CPE: cpe:2.3:a:zoom_video_communications:zoom_rooms_for_windows:*:*:*:*:*:*:*:*
Website: https://zoom.us/
Total vulnerabilities: 71
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoom Rooms Client for Windows version 5.13.6 2407 Zoom Rooms Client for Windows 5.13.6 2407 is affected by 71 vulnerabilities: 7 high, 17 medium, 47 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137492 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-53410		 CWE-367 Low
No
No
 7.0.5 14.07.2026 SB2026071475
#VU137491 - Improper Privilege Management
CVE-2026-53409		 CWE-269 Low
No
No
 7.1.0 14.07.2026 SB2026071474
#VU123681 - Improper Privilege Management
CVE-2026-30902		 CWE-269 Low
No
No
 6.6.0 10.03.2026 SB2026031050
#VU123680 - Improper input validation
CVE-2026-30901		 CWE-20 Low
No
No
 6.6.5 10.03.2026 SB2026031049
#VU119407 - Protection Mechanism Failure
CVE-2025-67460		 CWE-693 Low
No
No
 6.6.0 09.12.2025 SB2025120937
#VU118251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-62483		 CWE-200 Medium
No
No
 6.5.10 11.11.2025 SB2025111124
#VU118245 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-64739		 CWE-22 Medium
No
No
 6.5.10 11.11.2025 SB2025111118
#VU116990 - Command injection
CVE-2025-58132		 CWE-77 Medium
No
No
 6.5.5 14.10.2025 SB2025101453
#VU116989 - Improper Authentication
CVE-2025-58133		 CWE-287 Medium
No
No
 6.5.1 14.10.2025 SB2025101452
#VU114993 - Improper Enforcement of Behavioral Workflow
CVE-2025-58135		 CWE-841 Medium
No
No
 6.5.0 09.09.2025 SB2025090908
#VU114992 - Improper Authorization
CVE-2025-58134		 CWE-285 Medium
No
No
 6.5.0 09.09.2025 SB2025090907
#VU114991 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49461		 CWE-79 Low
No
No
 6.5.0 09.09.2025 SB2025090906
#VU114990 - Argument Injection or Modification
CVE-2025-49460		 CWE-88 Medium
No
No
 6.5.0 09.09.2025 SB2025090905
#VU114988 - Memory corruption
CVE-2025-49458		 CWE-119 Low
No
No
 6.5.0 09.09.2025 SB2025090903
#VU113833 - Untrusted Search Path
CVE-2025-49457		 CWE-426 Low
No
No
 6.3.10 12.08.2025 SB2025081244
#VU113832 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-49456		 CWE-362 Medium
No
No
 6.4.5 12.08.2025 SB2025081243
#VU113125 - Memory corruption
CVE-2025-49465		 CWE-119 Medium
No
No
 6.4.0 22.07.2025 SB2025070866
#VU112512 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49462		 CWE-79 Medium
No
No
 6.4.5 08.07.2025 SB2025070855
#VU112510 - Buffer overflow
CVE-2025-46789		 CWE-120 Medium
No
No
 6.4.5 08.07.2025 SB2025070853
#VU109006 - NULL Pointer Dereference
CVE-2025-30667		 CWE-476 Low
No
No
 6.4.0 13.05.2025 SB2025051313


Showing elements 1 - 20 out of 71