CVE-2025-49458 Zoom Workplace Clients - Buffer Overflow

Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access...

PT-2025-36984

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Clients affected versions not specified Description: Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. Recommendations: At the moment,...

Zoom Workplace VDI Plugin 安全漏洞

Zoom Workplace VDI Plugin is a plugin from Zoom USA. A security vulnerability exists in Zoom Workplace VDI Plugin versions prior to 6.4.10 and versions prior to 6.2.15 and 6.3.12, which stems from a competitive condition and could lead to information disclosure...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from the US-based Zoom Corporation. A security vulnerability exists in Zoom Workplace that originates from cross-site scripting and could lead to a denial of service attack...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace Clients for Windows that originates from an improperly executed operation that could lead to information disclosure...

CVE-2025-49459: Missing Authorization

Missing authorization in the installer for Zoom Workplace for Windows on ARM before version 6.5.0 may allow an authenticated user to conduct an escalation of privilege via local access...

PT-2025-36982

Name of the Vulnerable Software and Affected Versions: Zoom Workplace for Windows on ARM versions prior to 6.5.0 Description: Missing authorization in the installer may allow an authenticated user to conduct an escalation of privilege via local access. Recommendations: Update Zoom Workplace for...

Zoom Workplace VDI Client < 6.3.14 Vulnerability (ZSB-25031)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.3.14. It is, therefore, affected by a vulnerability as referenced in the ZSB-25031 advisory. - Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via...

Zoom Workplace < 6.5.0 Vulnerability (ZSB-25031)

The version of Zoom Workplace installed on the remote host is prior to 6.5.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25031 advisory. - Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network acces...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.5.0 that stems from a missing authorization in the installer, which could result in elevated privileges...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from a buffer overflow that could lead to a denial of service attack...

CVE-2025-58134: Incorrect Authorization

Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access...

Zoom Workplace < 6.5.0 Vulnerability (ZSB-25034)

The version of Zoom Workplace installed on the remote host is prior to 6.5.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25034 advisory. - Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via networ...

CVE-2025-58131: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 or before 6.2.15 and 6.3.12 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access...

CVE-2025-49461: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

CVE-2025-49458: Buffer Copy without Checking Size of Input

Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access...

PT-2025-36989

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Clients for Windows affected versions not specified Description: Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from improper authorization and could lead to a breach of integrity...

PT-2025-36983

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Client affected versions not specified Description: An uncontrolled resource consumption issue in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

CVE-2025-49460: Uncontrolled Resource Consumption

Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...