LIVE · cybersecurity feed
Live wire
OpenAI Announced $1B in Defensive Tools for Water UtilitiesAttackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS CredentialsCVE-2026-59346 · Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host CodeCVE-2026-32475 · Elementor Pro WordPress Plugin Vulnerability Exploited to Hack SitesBroadcom Patches Critical VMware Workstation and Fusion VM-Escape VulnerabilitiesHackers Leak Millions of Airport Passenger Records After Ransom RefusalUsing a VM to Contain an AI AgentCVE-2026-73749 · HPE Patches Critical RCE Vulnerabilities in AOS-CXCompanies Have Six Months to Prepare for Automated AttacksPhishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
vendor

Zoom

9 CVEs published in the last four months and 2 stories. Exploited flaws first.

Critical1
High8
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-534129.8criticalworkplace desktopImproper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK fo51d ago
CVE-2026-534088.1highmeeting software development kitImproper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and bef85d ago
CVE-2026-534078.1highworkplaceImproper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and bef85d ago
CVE-2026-309067.8highroomsUntrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated 115d ago
CVE-2026-309057.8highworkplace virtual desktop infrastructureExternal Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 115d ago
CVE-2026-534097.8highroomsImproper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to co51d ago
CVE-2026-534117.8highworkplace virtual desktop infrastructureA time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Z51d ago
CVE-2026-534067.8highremote controlInsufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before versio85d ago
CVE-2026-534107highremote control for zoom contact centerA time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Z51d ago

Filter the full tracker by Zoom →

Our coverage of Zoom

vulnerability

Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it

Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf

vulnerabilitycritical

“Zoomsday” flaws could let one Zoom participant attack another

Update Zoom now to protect against critical vulnerabilities that could allow an attacker in the same meeting to run malicious code on your device.