CVE-2025-0151

Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-24986

Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network...

CVE-2025-24064

Use after free in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2025-0149

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

CVE-2025-27440 Zoom Apps - Heap-based Buffer Overflow

Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-27440 Zoom Apps - Heap-based Buffer Overflow

Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-27440

CVE-2025-27440 describes a heap overflow in some Zoom Workplace Apps that enables an authenticated user to escalate privileges over the network. The most concrete public details point to Zoom Workplace Desktop App prior to 6.3.0 being affected (per Nessus ZSB-25012), with the vulnerability charac...

CVE-2025-27439 Zoom Apps - Buffer Underflow

Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-27439 Zoom Apps - Buffer Underflow

Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-27439

Summary (CVE-2025-27439): Buffer underflow vulnerability in Zoom Workplace Apps may allow an authenticated user to escalate privileges over the network. Evidence from Nessus (Zoom Workplace Desktop App

CVE-2025-0151

CVE-2025-0151 affects Zoom Workplace Desktop App (Zoom Workplace/Zoom Apps) with a use-after-free condition that an authenticated user can exploit over the network to escalate privileges. The Nessus entry ties the issue to Zoom Workplace Desktop App versions before 6.3.0 (ZSB-ZSB-25010). The vuln...

CVE-2025-0151 Zoom Apps - Use After Free

Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-0151 Zoom Apps - Use After Free

Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2025-0150 Zoom Workplace Apps for iOS - Incorrect Behavior Order

Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-0150

CVE-2025-0150 affects Zoom Workplace Apps for iOS prior to 6.3.0, due to an incorrect behavior order that may allow an authenticated user with network access to cause a denial of service. The issue is documented across multiple sources, with PT-2025-10852 explicitly stating the affected versions ...

CVE-2025-0149 Zoom Apps - Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

CVE-2025-0149 Zoom Apps - Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

CVE-2025-27430

Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA Interaction Center allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's...

Zoom Workplace 安全漏洞

Zoom Workplace App for iOS is an AI-first collaboration platform from Zoom Communications designed for iOS devices. A denial of service vulnerability exists in Zoom Workplace App for iOS, which stems from a misordered behavioral sequence, and can be exploited by an attacker to cause a denial of...

Siemens SINEMA Remote Connect Server

SUMMARY SINEMA Remote Connect Server before V3.2 SP3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends...