The vulnerability of Zoom Apps software products, related to the use of memory after it is freed, allows a hacker to trigger a service failure.

The vulnerability of Zoom Apps software products is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Zoom Workplace Cross-Site Scripting Vulnerability

Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. A cross-site scripting vulnerability exists in Zoom Workplace. The...

Zoom Workplace Desktop App < 6.3.0 Buffer Underflow (ZSB-ZSB-25010)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.3.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-ZSB-25010 advisory. - Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege v...

Zoom Workplace Desktop App < 6.3.0 Buffer Underflow (ZSB-25011)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.3.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25011 advisory. - Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via...

Zoom Workplace Desktop App < 6.3.0 Heap-Based Buffer Overflow (ZSB-25012)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.3.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25012 advisory. - Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via...

Zoom Workplace Desktop App < 6.3.0 DoS (ZSB-25008)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.3.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25008 advisory. - Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a...

CVE-2025-27443

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access...

Zoom Client for Meetings < 6.3.10 Insecure Default Variable Initialization Vulnerability (ZSB-25014)

The version of Zoom Client for Meetings installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25014 advisory. - Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to...

Zoom Client for Meetings < 6.3.10 Vulnerability (ZSB-25015)

The version of Zoom Client for Meetings installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25015 advisory. - Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of...

CVE-2025-30670

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30671

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-27441

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access...

CVE-2025-27442

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access...

Malicious code in highcharts-mouse-wheel-zoom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd3e7a1a5ccec6d7ad964e3183a5e78bcfd9722281b8205094e72ffcda8c26d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3190 Malicious code in highcharts-mouse-wheel-zoom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd3e7a1a5ccec6d7ad964e3183a5e78bcfd9722281b8205094e72ffcda8c26d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27443

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access...

CVE-2025-30671

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30670

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-27443

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access...

CVE-2025-30671

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...