CVE-2025-30663: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from a competitive condition that could lead to elevated privileges...

CVE-2025-46786: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access...

CVE-2025-30668: Integer Underflow (Wrap or Wraparound)

Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access...

Zoom Workplace 代码问题漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from an integer underflow that could lead to a denial of service attack...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from a buffer over-read that could lead to a denial of service attack...

Zoom Fixes High-Risk Flaw in Latest Update

Zoom fixes multiple security bugs in Workplace Apps, including a high-risk flaw. Users are urged to update to…...

PT-2025-21132

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: A high-severity flaw has been identified and patched in Zoom Workplace Apps. The issue was disclosed and patched on the same day, 2025-05-13. Recommendations: At the moment, there is no...

Zoom Workplace Cross-Site Scripting Vulnerability

Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. Zoom Workplace suffers from a cross-site scripting vulnerability that can b...

PT-2025-21203

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: A NULL pointer dereference issue may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment, there is no...

Zoom Workplace Apps for Windows Null Pointer Dereference Vulnerability

Zoom Workplace Apps for Windows is an official suite of collaboration tools from Zoom that includes core features such as team chat, whiteboards, notes, and more, and is required to be used through a Zoom Meetings account. A null pointer dereference vulnerability exists in Zoom Workplace Apps for...

Zoom Workplace Apps for Windows Null Pointer Dereference Vulnerability

Zoom Workplace Apps for Windows is the official suite of collaboration tools from Zoom, including core features such as team chat, whiteboards, notes, and more, available through a Zoom Meetings account. A null pointer dereference vulnerability exists in Zoom Workplace Apps for Windows, which can...

PT-2025-21204

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: The issue is related to an integer underflow in some Zoom Workplace Apps, which may allow an authenticated user to conduct a denial of service via network access. Recommendation...

PT-2025-21207

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: The issue is related to the improper neutralization of special elements in some Zoom Workplace Apps, which may allow an authenticated user to impact app integrity via network...

Unspecified Vulnerability in Zoom Workplace Apps for Windows

Zoom Workplace Apps for Windows is an official suite of collaboration tools from Zoom that includes core features such as team chat, whiteboards, notes, and more, and is required to be used through a Zoom Meetings account. A security vulnerability exists in Zoom Workplace Apps for Windows, which...

Hiding behind a password

What do your passwords say about you? It’s surprisingly personal. User generated passwords can reveal more than you might expect, including frustration, humour, and even how someone feels about their job. My password manager database has over 350 entries. I have chosen or generated all of them wi...

Zoom Workplace Cross-Site Scripting Vulnerability

Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. A cross-site scripting vulnerability exists in Zoom Workplace. The...

Zoom Workplace Desktop App < 6.3.0 Buffer Underflow (ZSB-ZSB-25010)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.3.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-ZSB-25010 advisory. - Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege v...

Zoom Workplace Desktop App < 6.3.0 DoS (ZSB-25008)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.3.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25008 advisory. - Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a...

Zoom Workplace Desktop App < 6.3.0 Buffer Underflow (ZSB-25011)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.3.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25011 advisory. - Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via...