CVE-2025-0144

Zoom Workplace Apps - Out-of-bounds Write

Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Rooms Controller and 4 more

CVE-2025-46785

Zoom Workplace Apps for Windows - Buffer Over-read

Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Rooms Controller and 2 more

CVE-2025-0149

Zoom Apps - Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Rooms Controller and 3 more

CVE-2024-45419

Zoom Apps - Improper Input Validation

Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Rooms Controller and 5 more

CVE-2024-45420

Zoom Apps - Uncontrolled Resource Consumption

Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Rooms Controller and 3 more

CVE-2024-45422

Zoom Apps - Improper Input Validation

Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Sdk Meeting Software Development Kit Rooms and 5 more

CVE-2025-30665

Zoom Workplace Apps for Windows - NULL Pointer Dereference

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Rooms Controller and 2 more

CVE-2024-39827

Zoom Workplace Desktop App for Windows - Improper Input Validation

Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Workplace Desktop

CVE-2025-30666

Zoom Workplace Apps for Windows - NULL Pointer Dereference

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Rooms Controller and 2 more

CVE-2025-46788

Zoom Workplace for Linux - Improper Certificate Validation

Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Workplace Desktop

CVE-2024-27238

Zoom Apps and SDKs - Race Condition

Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Workplace Desktop

CVE-2024-27240

Zoom Apps for Windows - Improper Input Validation

Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Rooms Workplace Desktop Workplace Virtual Desktop Infrastructure

CVE-2024-39820

Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Workplace Desktop

CVE-2024-39821

Zoom Workplace App for Windows and Zoom Rooms App for Windows - Race Condition

Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Rooms Workplace Desktop

CVE-2025-30671

Zoom Workplace Apps for Windows - Null Pointer

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Rooms Controller and 2 more

CVE-2025-30670

Zoom Workplace Apps for Windows - Null Pointer

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Rooms Controller and 2 more

CVE-2025-27443

Zoom Workplace Apps for Windows - Insecure Default Variable Initialization

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access.

CVSS 3.1 · 2.8 Low EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Rooms Controller and 1 more

CVE-2025-0146

Zoom Workplace app for macOS - Symlink Following

Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Rooms Rooms Controller and 2 more

CVE-2025-0147

Zoom Workplace App for Linux - Type Confusion

Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation of privilege via network access.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Meeting Software Development Kit Video Software Development Kit Workplace App and 1 more

CVE-2024-27247

Zoom Desktop Client for macOS - Improper Privilege Management

Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Zoom

Products

Workplace Desktop Zoom