CVE-2025-30663

CVE-2025-30663 affects Zoom Workplace Apps. It describes a Time-of-check time-of-use race condition that could allow an authenticated user with local access to escalate privileges. Severity is high (CVSS v3.1 metrics show high impact to confidentiality, integrity, and availability; local attack w...

PT-2025-21206 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: The issue is related to a buffer over-read that may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment,...

PT-2025-21202 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: The issue is related to a NULL pointer dereference that may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the...

PT-2025-21200

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: The issue is related to the improper neutralization of special elements in some Zoom Workplace Apps, which may allow an authenticated user to conduct an escalation of privilege...

PT-2025-21201 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: A NULL pointer dereference issue may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment, there is no...

CVE-2025-30666: NULL Pointer Dereference

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-46786: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access...

CVE-2025-30667: NULL Pointer Dereference

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30664: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2025-46785: Buffer Copy without Checking Size of Input

Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30665: NULL Pointer Dereference

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30668: Integer Underflow (Wrap or Wraparound)

Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30663: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access...

PT-2025-21132

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: A high-severity flaw has been identified and patched in Zoom Workplace Apps. The issue was disclosed and patched on the same day, 2025-05-13. Recommendations: At the moment, there is no...

Zoom Workplace Apps for Windows Null Pointer Dereference Vulnerability

Zoom Workplace Apps for Windows is an official suite of collaboration tools from Zoom that includes core features such as team chat, whiteboards, notes, and more, and is required to be used through a Zoom Meetings account. A null pointer dereference vulnerability exists in Zoom Workplace Apps for...

PT-2025-21204

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: The issue is related to an integer underflow in some Zoom Workplace Apps, which may allow an authenticated user to conduct a denial of service via network access. Recommendation...

Unspecified Vulnerability in Zoom Workplace Apps for Windows

Zoom Workplace Apps for Windows is an official suite of collaboration tools from Zoom that includes core features such as team chat, whiteboards, notes, and more, and is required to be used through a Zoom Meetings account. A security vulnerability exists in Zoom Workplace Apps for Windows, which...

PT-2025-21203

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: A NULL pointer dereference issue may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment, there is no...

Zoom Workplace Apps for Windows Null Pointer Dereference Vulnerability

Zoom Workplace Apps for Windows is the official suite of collaboration tools from Zoom, including core features such as team chat, whiteboards, notes, and more, available through a Zoom Meetings account. A null pointer dereference vulnerability exists in Zoom Workplace Apps for Windows, which can...

PT-2025-21207

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: The issue is related to the improper neutralization of special elements in some Zoom Workplace Apps, which may allow an authenticated user to impact app integrity via network...