CVE-2024-45421

CVE-2024-45421 describes a buffer overflow in some Zoom Apps that could allow an authenticated user to escalate privileges over the network. The PT-2024-31624 entry specifies Zoom Product Suite versions prior to 6.2.0 as affected and recommends upgrading to 6.2.0 or later to address the issue. Ot...

CVE-2025-46785

CVE-2025-46785 affects Zoom Workplace Apps for Windows. The issue is a buffer over-read in affected components that can allow an authenticated user to cause a denial of service over the network. The available sources (NVD/Red Hat/CVE listings, PT-2025-21206 notes) identify the vulnerability and i...

CVE-2024-45417

Zoom Apps for macOS is affected by CVE-2024-45417 due to uncontrolled resource consumption in the installer prior to version 6.1.5. A privileged local user could leverage this to disclose information. The available details indicate the impact is information disclosure with local access, and remed...

CVE-2025-27442

CVE-2025-27442 corresponds to a cross-site scripting vulnerability in Zoom Workplace Apps. The issue allows an unauthenticated attacker to potentially compromise integrity via adjacent network access, with user interaction required. The exploits/patch status is not detailed in the provided docume...

CVE-2024-39822

CVE-2024-39822 affects Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. Affected: Zoom components vulnerable to information disclosure via network access by an authenticated user. Root cause: sensitive information exposure in these Zoom products. Impact: confidentiality loss witho...

CVE-2024-39825

CVE-2024-39825 affects Zoom Workplace Apps and Rooms Clients. The issue is a heap-based buffer overflow that can allow an authenticated, remote attacker to escalate privileges over the network. Exploitation context: network access; no user interaction required; impact reported as high for confide...

CVE-2025-0144

CVE-2025-0144 describes an out-of-bounds write in Zoom Workplace Apps that can lead to loss of integrity over a network when processing a specific request. Multiple sources confirm the issue affects Zoom Workplace Desktop App prior to version 6.2.5 (per Nessus ZSB-25003) and indicate the vulnerab...

CVE-2024-45418

CVE-2024-45418 affects Zoom Apps for macOS prior to 6.1.5. The root cause is symlink following in the installer which could enable an authenticated user to escalate privileges over the network. Impact is elevated privileges on the host; no exploitation details are provided beyond the stated risk....

CVE-2024-27238

CVE-2024-27238 concerns a race condition in the Windows installer for Zoom products (Zoom Apps and SDKs) prior to version 6.0.0 that may allow a locally authenticated user to escalate privileges. Multiple sources describe the issue as a local race condition affecting Zoom components installed on ...

CVE-2024-39818

CVE-2024-39818 affects Zoom Workplace Apps and SDKs. The issue is a protection mechanism failure that may allow an authenticated user to disclose information over the network. CVSSv3.1: base score 6.5 (MEDIUM) from NVD, with Confidentiality Impact: High, Attack Vector: Network, Attack Complexity:...

CVE-2024-42435

The CVE-2024-42435 entry covers a sensitive information disclosure in Zoom components. Affected software includes Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. The root cause and impact details in the provided sources indicate that a privileged user could obtain confidential da...

CVE-2024-39824

CVE-2024-39824 affects Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. The issue is missing authorization that may allow a privileged user to disclose information over the network. The description and connected documents consistently identify the affected Zoom products and the im...

CVE-2024-27246

CVE-2024-27246 affects Zoom Workplace Apps and SDKs. The issue is a use-after-free in components handling network activity, allowing an authenticated user to cause a denial of service over the network. Used details: CVSS v3.1 base metrics indicate MEDIUM severity (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/...

CVE-2024-39823

CVE-2024-39823 affects Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. The connected sources indicate a missing authorization in these Zoom products could allow a privileged user to perform information disclosure over a network. The exact vulnerable components (versions, files) a...

CVE-2024-42434

The CVE-2024-42434 issue affects Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. It is described as a Missing authorization vulnerability that could allow a privileged user to disclose information over the network. The NVD/CVE entries and related sources cite a network-access att...

CVE-2024-42436

CVE-2024-42436 describes a buffer overflow in Zoom components: Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. The underlying issue allows an authenticated user, leveraging network access, to cause a denial of service. The NVD metrics assign a CVSS v3.1 base score of 6.5 (Medium) with...

CVE-2024-45424

CVE-2024-45424 is described as a business logic error in Zoom Workplace Apps that could allow an unauthenticated user to disclose information over the network. Public details indicate affected software is Zoom Workplace/Desktop App prior to version 6.1.0, with the root cause tied to business logi...

CVE-2025-0145

CVE-2025-0145 affects Zoom Workplace Desktop App for Windows. Vulnerability: untrusted search path in the installer could allow an authorized local user to escalate privileges. Public details consistently reference installations prior to version 6.2.5 as affected (e.g., Nessus ZSB-25004 notes). R...

CVE-2025-0147

Zoom Workplace App for Linux prior to version 6.2.10 contains a type confusion vulnerability that may allow an authorized user to escalate privileges via network access. The issue affects the Linux desktop client and is tied to handling of data types, enabling escalation to root-level privileges ...

CVE-2024-45425

CVE-2024-45425 concerns Zoom Workplace Apps and refers to incorrect user management that may allow a privileged user to disclose information over the network. The provided sources consistently describe a network-accessible path to information disclosure with high confidentiality impact (per CVSS ...

CVE-2024-45426

CVE-2024-45426 : Affected product is Zoom Workplace Apps. The root cause is an incorrect ownership assignment that can permit a privileged user to disclose information over the network. Reported impact is solely on confidentiality (high), with no integrity/availability effects per the sources. Th...

CVE-2025-30671

CVE-2025-30671 affects Zoom Workplace Apps for Windows. The issue is a null pointer dereference that can allow an authenticated user to cause a denial of service over the network. Connected Nessus advisories note affected versions prior to 6.3.10 for Zoom Workplace Desktop/Client components and r...

CVE-2024-39821

Zoom Workplace App for Windows and Zoom Rooms App for Windows suffer a race condition in their installer that can allow a local authenticated attacker to cause a denial of service via local access. The Nessus entry ZSB-24028 cites affected versions being prior to 6.0.10 for Zoom Workplace Desktop...

CVE-2024-39827

Zoom Workplace Desktop App for Windows is affected by CVE-2024-39827 due to improper input validation in the installer prior to version 6.0.10. The issue allows a local authenticated user to cause a denial of service via local access. The vulnerability is documented across multiple sources (NVD/N...

CVE-2024-45419

CVE-2024-45419 concerns Zoom Apps and involves improper input validation that can allow an unauthenticated user to disclose information over the network. Affected software is Zoom Apps (per the CVE entry and multiple sources), with the vulnerability described as enabling information disclosure vi...

CVE-2024-39820

CVE-2024-39820 affects Zoom Workplace Desktop App for macOS prior to version 6.0.10. The issue is an uncontrolled search path element in the installer, enabling an authenticated local attacker to cause a denial of service via local access. A fixed version is 6.0.10 or later; remediation is to upg...

CVE-2024-42438

The CVE-2024-42438 entry applies to Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. The issue is a buffer overflow in these components that allows an authenticated user to trigger a denial of service over the network. The available connected records confirm the affected product a...

CVE-2025-0146

CVE-2025-0146 affects Zoom Workplace App for macOS prior to 6.2.10. The issue arises from symlink following in the installer, allowing an authenticated user with local access to cause a denial of service. Public sources in the connected documents corroborate the DoS impact via local access due to...

CVE-2025-0143

CVE-2025-0143 describes an out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5, which may allow an unauthorized user to cause a denial of service via network access. Affected software is the Zoom Workplace App for Linux; root cause is the out-of-bounds write condition. Th...

CVE-2025-30670

Summary of CVE-2025-30670 : The issue is a null pointer dereference in Zoom Workplace Apps for Windows that can allow an authenticated user to cause a denial of service over the network. Connected documents specify affected products as Zoom Workplace Desktop App and Zoom Client for Meetings, with...

CVE-2024-27239

CVE-2024-27239 is a use-after-free vulnerability in some Zoom Workplace Apps and SDKs that could allow an authenticated user to cause a denial-of-service over the network. Affected software is Zoom Workplace Apps and SDKs; root cause is use-after-free. Impact is DoS with network access; no explic...

CVE-2024-27243

CVE-2024-27243 describes a buffer overflow in Zoom Workplace Apps and SDKs. The vulnerability affects Zoom’s Workplace components when processing untrusted input, allowing an authenticated user to cause a denial of service over a network connection. The CVSSv3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:...

CVE-2024-42437

CVE-2024-42437 describes a buffer overflow in Zoom components: Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers. An authenticated user could cause a denial of service via network access due to the overflow vulnerability. The CVSS details indicate NETWORK access, low attack complexity, a...

CVE-2024-42439

CVE-2024-42439 affects Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS prior to 6.1.0. The root cause is an untrusted search path in the installer, which may allow a local, privileged user to escalate privileges. Affected products: Zoom Workplace Desktop App for macOS (pre-6.1...

CVE-2025-27443

CVE-2025-27443 concerns Zoom Workplace Apps for Windows, caused by insecure default variable initialization in the affected software. The vulnerability could allow an authenticated user to cause a loss of integrity via local access. Multiple connected sources consistently describe the issue in Zo...

CVE-2024-27245

This CVE (CVE-2024-27245) affects Zoom Workplace Apps and SDKs. The vulnerability is a buffer overflow in these components that could allow an authenticated user to cause a denial of service over the network. The available sources confirm the affected product family (Zoom Workplace Apps and SDKs)...

CVE-2024-42440

CVE-2024-42440 affects Zoom on macOS: Zoom Workplace Desktop App, Zoom Meeting SDK, and Zoom Rooms Client prior to version 6.1.5 suffer from improper privilege management in the installer, enabling privilege escalation via local access. Public details from multiple sources confirm the affected co...

CVE-2024-27241

CVE-2024-27241 corresponds to an improper input validation flaw affecting Zoom Apps and SDKs. The connected Nessus entry specifies Zoom Workplace Desktop App

CVE-2024-39826

CVE-2024-39826 affects Zoom Workplace Apps and SDKs for Windows. The connected sources indicate a path traversal vulnerability in Zoom Workplace Desktop App for Windows (pre-6.0.0) that could let an authenticated user disclose information via network access. Affected component is the Windows Zoom...

CVE-2025-0149

CVE-2025-0149 affects Zoom Workplace Apps. The issue is insufficient verification of data authenticity, potentially allowing an unauthenticated, network-connected user to cause a denial-of-service. CVSS describes high availability impact (A: HIGH) with network access and no user interaction requi...

CVE-2025-27439

Summary (CVE-2025-27439): Buffer underflow vulnerability in Zoom Workplace Apps may allow an authenticated user to escalate privileges over the network. Evidence from Nessus (Zoom Workplace Desktop App

CVE-2025-27441

CVE-2025-27441 is a cross-site scripting issue in Zoom Workplace Apps caused by improper filtering of user-supplied input. The vulnerability could allow an unauthenticated attacker to compromise data integrity via adjacent network access. The connected sources corroborate the vulnerability and it...

CVE-2025-30667

CVE-2025-30667 affects Zoom Workplace Apps for Windows and is caused by a NULL pointer dereference in the application. An authenticated user could trigger a denial-of-service via network access. The available sources (NVD/Red Hat/CVE listings) describe the issue but do not provide concrete inform...

CVE-2024-27240

CVE-2024-27240 concerns Zoom Apps for Windows where the installer contains improper input validation. The vulnerability affects the Zoom Apps installer component, enabling a local, authenticated user to escalate privileges via local access. The NVD metrics indicate LOCAL attack vector, LOW attack...

CVE-2024-39819

CVE-2024-39819 covers a privilege-escalation issue in the Windows installer for Zoom Workplace Apps and SDKs. The root cause is an integrity check within the installer that may allow an authenticated user with local access to elevate privileges. Documents consistently describe this as a local, au...

CVE-2025-30666

CVE-2025-30666 corresponds to a NULL pointer dereference in Zoom Workplace Apps for Windows. The vulnerability could allow an authenticated user to cause a denial of service over the network, with CVSSv3.1 base metrics indicating Availability Impact: HIGH and Confidentiality/Integrity Impact: NON...

CVE-2024-42441

CVE-2024-42441 affects Zoom macOS components (Zoom Workplace Desktop App, Zoom Meeting SDK, Zoom Rooms Client) prior to 6.1.5. The issue is improper privilege management in the installer, enabling a local escalation of privileges by a privileged user. Impact is eventuated as high confidentiality,...

CVE-2025-30663

CVE-2025-30663 affects Zoom Workplace Apps. It describes a Time-of-check time-of-use race condition that could allow an authenticated user with local access to escalate privileges. Severity is high (CVSS v3.1 metrics show high impact to confidentiality, integrity, and availability; local attack w...

CVE-2024-45422

CVE-2024-45422 affects Zoom Apps (Zoom, prior to 6.2.0) due to improper input validation, enabling an unauthenticated user to trigger a denial of service over the network. The issue is documented in multiple sources (including PT-2024-31625) with explicit affected version range and network-based ...

CVE-2025-30668

CVE-2025-30668 affects Zoom Workplace Apps. An integer underflow in affected components may allow an authenticated user to cause a denial of service over the network. The description/references in the supplied documents confirm the vulnerability type and impact (DoS) but do not provide concrete e...