PatchTheCVEzoom vulnerabilities and fixes
Recent CVEs affecting zoom, with upgrade or downgrade steps. 6 tracked.
zoom has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-02-16. Highest priority: CVE-2025-49464 (score 36/100).
- CVE-2026-0998 MEDIUM 4.3 UPGRADE UPGRADE Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions
- CVE-2026-0997 MEDIUM 4.3 UPGRADE UPGRADE Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions
- CVE-2025-49464 MEDIUM 6.5 UPGRADE Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial o
- CVE-2025-49463 MEDIUM 6.5 UPGRADE Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthe
- CVE-2025-49462 LOW 3.5 UPGRADE UPGRADE Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct
- CVE-2025-46789 MEDIUM 6.5 MITIGATE Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial o
FAQ
How do I fix zoom vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zoom being exploited right now?
None of the tracked zoom CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zoom CVE should I patch first?
CVE-2025-49464 currently ranks highest (36/100): Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial o.