Vulnerabilities exploited in Zoom

Zoom has identified vulnerabilities in the Zoom Client for Windows, Zoom Rooms for Windows, and other Zoom Windows products, such as the Windows Desktop Client, VDI Client, and Meeting SDK. These vulnerabilities include a TOCTOU race condition that can be exploited by authenticated local users to...

PT-2026-60396

Name of the Vulnerable Software and Affected Versions Zoom Client for Windows affected versions not specified Description A time-of-check to time-of-use TOCTOU race condition exists in the installation and uninstallation process. This flaw allows an authenticated local user to escalate privileges...

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows DWM allows an authorized attacker to elevate privileges locally...

Security Updates for Windows App Client for Windows Desktop (June 2026)

The Windows app installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. CVE-2026-42908 - Heap-based buffer overflow in Remote Deskt...

CVE-2026-44813

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-44807

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-42983

CVE-2026-42983 is a Windows vulnerability described across multiple sources as a use-after-free in the DWM Core Library that allows an authorized, local attacker to elevate privileges. The issue is identified consistently in Microsoft’s MSRC page and NVD records; no public exploit details or defa...

EUVD-2026-35748

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to improper bounds checking in memory operations. An attacker can execute arbitrary code or escalate privileges by supplying crafted input to the affected process. Remediation Upgrade...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to improper bounds checking in memory operations. An attacker can execute arbitrary code or escalate privileges by supplying crafted input to the affected process. Remediation Upgrade...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to improper bounds checking in memory operations. An attacker can execute arbitrary code or escalate privileges by supplying crafted input to the affected process. Remediation Upgrade...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper validation of user-supplied input in the authentication process. An attacker can gain elevated privileges by providing crafted input during local interaction. Remediation Upgrade...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper validation of user-supplied input in the authentication process. An attacker can gain elevated privileges by providing crafted input during local interaction. Remediation Upgrade...

CVE-2026-34336

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-34336

Buffer over-read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-64680

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-59254

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-62376 pwn.college DOJO vulnerable to improper authentication in workspace endpoint allowing unauthorized Windows VM access

pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The...

CVE-2025-58722

Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...

PT-2025-42031

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in the Desktop Window Manager DWM of Windows operating systems. Exploitation of this issue can allow an attacker to elevate privileges locally. The...