Video Conferencing with Zoom

Video Conferencing with Zoom has 13 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 13 are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2026 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (38%). Other recurring categories include Missing Authorization, Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 13 issues recorded for Video Conferencing with Zoom has a vendor fix available, so running the current release closes all known holes.

8 independent researchers contributed these findings, most of them (3) reported by Krzysztof Zając.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Video Conferencing with Zoom vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-66641

Video Conferencing with Zoom <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

13 records


2026-10-05 08:43	Video Conferencing with Zoom <= 4.6.10 - Authenticated (Subscriber+) Information Exposure Video Conferencing with Zoom <= 4.6.10	`CVE-2026-103335`	4.3 Medium	Ananda Dhakal	Yes
2026-08-18 00:00	Video Conferencing with Zoom <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Video Conferencing with Zoom <= 4.6.9	`CVE-2026-66641`	6.4 Medium	Ananda Dhakal	Yes
2026-06-15 14:43	Video Conferencing with Zoom <= 4.6.7 - Missing Authorization to Unauthenticated Zoom SDK Credential Exposure via 'get_auth' AJAX Action Video Conferencing with Zoom <= 4.6.7	`CVE-2026-6964`	5.3 Medium	aetta	Yes
2026-02-19 00:00	Video Conferencing with Zoom < 4.6.6 - Missing Authorization Video Conferencing with Zoom < 4.6.6	`CVE-2026-1368`	5.3 Medium	ibrahimsql	Yes
2026-02-15 00:00	Video Conferencing with Zoom <= 4.6.6 - Missing Authorization Video Conferencing with Zoom <= 4.6.6	`CVE-2026-39653`	4.3 Medium	Nabil Irawan	Yes
2024-04-25 00:00	Video Conferencing with Zoom <= 4.4.4 - Open Redirect Video Conferencing with Zoom <= 4.4.4	`CVE-2024-33584`	6.1 Medium	Joshua Chan	Yes
2024-03-22 00:00	Video Conferencing with Zoom <= 4.4.5 - Sensitive Information Exposure Video Conferencing with Zoom <= 4.4.5	`CVE-2024-2033`	4.3 Medium	Krzysztof Zając	Yes
2024-03-12 00:00	Video Conferencing with Zoom <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Video Conferencing with Zoom <= 4.4.4	`CVE-2024-2031`	6.4 Medium	Krzysztof Zając	Yes
2023-07-25 00:00	Video Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure Video Conferencing with Zoom <= 4.2.1	`CVE-2023-3947`	3.7 Low	István Márton	Yes
2022-12-29 00:00	Video Conferencing with Zoom <= 4.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Video Conferencing with Zoom <= 4.0.9	`CVE-2022-4578`	6.4 Medium	István Márton	Yes

Showing 1–10 of 13 reports