Zoom Video Communications, Inc. Zoom Rooms App for Windows

Name: Zoom Video Communications, Inc. Zoom Rooms App for Windows
Brand: Zoom Video Communications, Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical4high6medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-49464US	—	0.69% (53rd)	—	no fix	2025-07-10	≤ 6.4.0
CVE-2024-27246US	medium6.5	0.64% (51st)	—	no fix	2025-02-25	≤ 6.0.0
CVE-2024-27245US	medium6.5	0.64% (50th)	—	no fix	2025-02-25	≤ 6.0.0
CVE-2024-39825US	high8.5	0.63% (50th)	—	no fix	2024-08-14	≤ 6.0.0
CVE-2025-46789US	—	0.55% (46th)	—	no fix	2025-07-10	≤ 6.4.5
CVE-2024-39826US	—	0.44% (38th)	—	no fix	2024-07-15	≤ 5.17.13
CVE-2024-27241US	high7.5	0.43% (37th)	—	no fix	2024-07-15	≤ 6.0.0
CVE-2024-45425US	medium6.5	0.32% (25th)	—	no fix	2025-02-25	≤ 6.1.0
CVE-2024-45426US	medium6.5	0.32% (24th)	—	no fix	2025-02-25	≤ 6.1.0
CVE-2024-27240US	high7.8	0.17% (7th)	—	no fix	2024-07-15	≤ 6.0.0
CVE-2024-39821US	medium4.4	0.14% (3rd)	—	no fix	2024-07-15	≤ 6.0.6
CVE-2024-27238US	medium6.3	0.11% (1st)	—	no fix	2024-07-15	≤ 6.0.0
CVE-2024-39819US	high7.3OT elevated	0.10% (1st)	—	no fix	2024-07-15	≤ 5.17.13

The flaw types (CWEs) most of these CVEs share.

CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-286Incorrect User Management1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.