CVE-2025-27442: Improper Neutralization of Input During Web Page Generation

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access...

PT-2025-15475 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: A null pointer dereference issue may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment, there is no...

Zoom Workplace Apps Buffer Overflow Vulnerability

Zoom Workplace Apps is an enterprise-grade collaboration platform that combines video conferencing, team collaboration, AI assistance, and other features for hybrid office scenarios. Zoom Workplace Apps suffers from a buffer overflow vulnerability that stems from certain applications not properly...

Zoom Workplace Apps Heap Buffer Overflow Vulnerability

Zoom Workplace Apps is an enterprise-grade collaboration platform that combines video conferencing, team collaboration, AI assistance, and other features for hybrid office scenarios. Zoom Workplace Apps suffers from a heap buffer overflow vulnerability that stems from the program not properly...

CVE-2025-0149

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

CVE-2025-27440

Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-27439

Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-0150

Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-0151

Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-27440

Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-27439

Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-27440

Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-27439

Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-0150

Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-0151

Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-0151

Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-0149

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

CVE-2025-27440 Zoom Apps - Heap-based Buffer Overflow

Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-27440 Zoom Apps - Heap-based Buffer Overflow

Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-27440

CVE-2025-27440 describes a heap overflow in some Zoom Workplace Apps that enables an authenticated user to escalate privileges over the network. The most concrete public details point to Zoom Workplace Desktop App prior to 6.3.0 being affected (per Nessus ZSB-25012), with the vulnerability charac...