CVE-2025-30666

CVE-2025-30666 corresponds to a NULL pointer dereference in Zoom Workplace Apps for Windows. The vulnerability could allow an authenticated user to cause a denial of service over the network, with CVSSv3.1 base metrics indicating Availability Impact: HIGH and Confidentiality/Integrity Impact: NON...

CVE-2025-30666 Zoom Workplace Apps for Windows - NULL Pointer Dereference

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30666 Zoom Workplace Apps for Windows - NULL Pointer Dereference

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30665 Zoom Workplace Apps for Windows - NULL Pointer Dereference

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30665

The CVE-2025-30665 entry concerns Zoom Workplace Apps for Windows, where a NULL pointer dereference could allow an authenticated user to cause a denial of service over the network. Affected component is Zoom Workplace Apps for Windows (specific versions not listed in the provided docs). The under...

CVE-2025-30665 Zoom Workplace Apps for Windows - NULL Pointer Dereference

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30664 Zoom Workplace Apps - Cross-site Scripting

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2025-30664

CVE-2025-30664 is a cross-site scripting issue in Zoom Workplace Apps that could enable an authenticated local attacker to escalate privileges. The reported vector is local, requiring low privileges and user interaction, with a focus on improper neutralization of special elements as the root caus...

CVE-2025-30664 Zoom Workplace Apps - Cross-site Scripting

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2025-30663 Zoom Workplace Apps - Time-of-check Time-of-use

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2025-30663 Zoom Workplace Apps - Time-of-check Time-of-use

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2025-30663

CVE-2025-30663 affects Zoom Workplace Apps. It describes a Time-of-check time-of-use race condition that could allow an authenticated user with local access to escalate privileges. Severity is high (CVSS v3.1 metrics show high impact to confidentiality, integrity, and availability; local attack w...

PT-2025-21202 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: The issue is related to a NULL pointer dereference that may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the...

PT-2025-21207 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: The issue is related to the improper neutralization of special elements in some Zoom Workplace Apps, which may allow an authenticated user to impact app integrity via network...

PT-2025-21204 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: The issue is related to an integer underflow in some Zoom Workplace Apps, which may allow an authenticated user to conduct a denial of service via network access. Recommendation...

PT-2025-21200 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: The issue is related to the improper neutralization of special elements in some Zoom Workplace Apps, which may allow an authenticated user to conduct an escalation of privilege...

PT-2025-21206 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: The issue is related to a buffer over-read that may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment,...

PT-2025-21201 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: A NULL pointer dereference issue may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment, there is no...

PT-2025-21203 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: A NULL pointer dereference issue may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment, there is no...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...