Zoom Workplace < 6.4.5 Vulnerability (ZSB-25025)

The version of Zoom Workplace installed on the remote host is prior to 6.4.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25025 advisory. - Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of...

CVE-2025-49462

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access...

CVE-2025-49463

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-49464

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access...

CVE-2025-46789

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access...

Zoom Workplace for Windows < 6.4.5 / Workplace VDI for Windows < 6.3.12 Buffer Overflow (ZSB-25024)

The version of Zoom Workplace or Zoom Workplace VDI installed on the remote Windows host is prior to 6.4.5 or 6.3.12 respectively. It is, therefore, affected by a buffer overflow vulnerability as referenced in the ZSB-25024 advisory. A classic buffer overflow vulnerability in certain Zoom Clients...

CVE-2025-49463

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-49464

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access...

CVE-2025-49464

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access...

CVE-2025-49462

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access...

CVE-2025-49462

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access...

CVE-2025-49463

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-49464 Zoom Clients for Windows- Classic Buffer Overflow

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access...

CVE-2025-49464 Zoom Clients for Windows- Classic Buffer Overflow

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access...

CVE-2025-49464

CVE-2025-49464 is a documented buffer overflow vulnerability in Zoom Clients for Windows that permits an authorized user to cause a denial of service over the network. The CVSS v3.1 base score is 6.5 (MEDIUM) with network attack vector, low privileges required, no user interaction, and an impact ...

CVE-2025-49463

CVE-2025-49463 affects Zoom Clients for iOS, with versions prior to 6.4.5 vulnerable to information disclosure due to insufficient control flow management. The flaw can be triggered by an unauthenticated user via network access. Remediation: update Zoom Clients for iOS to version 6.4.5 or later. ...

CVE-2025-49463 Zoom Clients for iOS - Insufficient Control Flow Management

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-49463 Zoom Clients for iOS - Insufficient Control Flow Management

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-49462 Zoom Clients - Cross-site Scripting

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access...

CVE-2025-49462 Zoom Clients - Cross-site Scripting

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access...