Workplace
Vendor:
First CVE: May 15, 2024 · Active for 2 years
42
Total CVEs
More Total CVEs than 97% of tracked products
14.0
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 41% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Workplace over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 15, 2024
2 years ago
Most Recent CVE
Jun 12, 2026
42 days ago
CVE Severity & Scoring
Workplace42 CVEs
57%
36%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (4.8%)
Network37 (88.1%)
Unknown0 (0.0%)
Physical1 (2.4%)
Adjacent Network2 (4.8%)
Attack Complexity
Low40 (95.2%)
High2 (4.8%)
Unknown0 (0.0%)
User Interaction
None37 (88.1%)
Unknown0 (0.0%)
Required5 (11.9%)
Privileges Required
Low25 (59.5%)
High4 (9.5%)
None13 (31.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (42 CVEs).
42 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-53407CRITICAL Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an | Jun 12, 2026 | 9.8 | 39 | NO | NO |
CVE-2025-64741CRITICAL Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access. | Nov 13, 2025 | 9.8 | 35 | NO | NO |
CVE-2026-53408HIGH Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an | Jun 12, 2026 | 8.1 | 32 | NO | NO |
CVE-2025-62484CRITICAL Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via networ | Nov 13, 2025 | 9.8 | 32 | NO | NO |
CVE-2024-45421HIGH Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access. | Feb 25, 2025 | 8.8 | 28 | NO | NO |
CVE-2025-27440HIGH Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. | Mar 11, 2025 | 8.8 | 27 | NO | NO |
CVE-2025-27439HIGH Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. | Mar 11, 2025 | 8.8 | 27 | NO | NO |
CVE-2025-0151HIGH Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. | Mar 11, 2025 | 8.8 | 27 | NO | NO |
CVE-2024-39825HIGH Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access. | Aug 14, 2024 | 8.5 | 27 | NO | NO |
CVE-2025-49461HIGH Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. | Sep 9, 2025 | 7.4 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (42 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (42 CVEs).
Media Mentions
Signals from CVEs in this product scope (42 CVEs).
Top CNAs Publishing CVEs For Workplace
Top CWEs
Versions
No cataloged versions.