Workplace Desktop
75 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Workplace Desktop, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.
Workplace Desktop CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 3 |
| 2024-12 | 0 |
| 2025-01 | 5 |
| 2025-02 | 9 |
| 2025-03 | 4 |
| 2025-04 | 5 |
| 2025-05 | 8 |
| 2025-06 | 0 |
| 2025-07 | 1 |
| 2025-08 | 2 |
| 2025-09 | 5 |
| 2025-10 | 1 |
| 2025-11 | 5 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 3 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 2 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 75 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical3
- High15
- Medium54
- Low3
Latest CVEs
The 15 most recently published vulnerabilities affecting Workplace Desktop.
- CVE-2026-53412Zoom Workplace VDI Plugin for Windows - Improper Input Validation9.8
- CVE-2026-53410Zoom Clients for Windows - Race Condition7.0
- CVE-2026-30903External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.9.6
- CVE-2026-30902Zoom Clients for Windows - Improper Privilege Management7.8
- CVE-2026-30900Zoom Workplace Clients for Windows - Improper Check7.8
- CVE-2025-62483Zoom Clients - Improper Removal of Sensitive Information5.3
- CVE-2025-62482Zoom Workplace for Windows - Cross-site Scripting4.3
- CVE-2025-30669Zoom Workplace Clients - Improper Certificate Validation4.8
- CVE-2025-64739Zoom Clients - External Control of File Name or Path4.3
- CVE-2025-64738Zoom Workplace for macOS - External Control of File Name or Path5.0
- CVE-2025-58132Zoom Clients for Windows - Command Injection4.1
- CVE-2025-58135Zoom Workplace Clients for Windows - Improper Action Enforcement5.3
- CVE-2025-58134Zoom Workplace Clients for Windows - Incorrect Authorization4.3
- CVE-2025-49461Zoom Workplace Clients - Cross-site Scripting4.3
- CVE-2025-49460Zoom Workplace Clients - Argument Injection4.3
Product grouping is registry-driven, with AI assist and human review. How it works