z
zoom
Security Risk Profile
59
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 263 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 13, 2004 to present
263
Total CVEs
167
Critical+High
1
Exploited
167
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
167
Critical/High
Risk Level
59/100
medium
⚠️ 1 Active Exploits🆕 4Fresh (<7d)📈 4 in Last 30 Days
Severity Distribution
Critical
28High
139Medium
85Low
5Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
19Age Distribution
Common Weaknesses (CWE)
1
Input Validation
31
2
Buffer Overflow
19
3
XSS
12
4
Race Condition
10
5
Path Traversal
8
Most Affected Products
1. Zoom Workplace Virtual Desktop Infrastructure Windows119
2. Zoom Rooms Windows94
3. Zoom Meeting Software Development Kit Windows66
4. Zoom Workplace Desktop Windows63
5. Zoom Rooms Macos59
Recent Vulnerabilities
See more →CVE-2026-108187
CVSS 8.1high
Nov 10, 2026🔧 No Patch
CVE-2026-108186
CVSS 9.6critical
Nov 10, 2026🔧 No Patch
CVE-2026-108185
CVSS 7.4high
Oct 13, 2026🔧 No Patch
CVE-2026-108184
CVSS 7.4high
Oct 13, 2026🔧 No Patch
CVE-2026-53420
CVSS 8.0high
Oct 13, 2026🔧 No Patch
CVE-2026-53418
CVSS 8.1high
Oct 13, 2026🔧 No Patch
CVE-2026-76386
CVSS 4.3medium
Information Disclosure through Action Parameters in Zoom app for Splunk SOAR
Aug 19, 2026🔧 No Patch
https://reddit.com/r/cybersecurity/comments/1vlpe1b/zoomsday_zeroclick_rce_in_zoom_from_any_meeting/
unknown
Zoomsday: Zero-click RCE in Zoom, from any meeting participant to any other (CVE-2026-53413)
Aug 11, 2026🔧 No Patch
CVE-2026-53416
CVSS 7.1high
Zoom VDI - Path Traversal
Aug 11, 2026🔧 No Patch
CVE-2026-53415
CVSS 8.3high
Zoom Clients - Use After Free
Aug 11, 2026🔧 No Patch
Monitor zoom in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.