Zoom Workplace Apps For Linux
by Zoom Video Communications, Inc.
CVEs (20)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-30663 | Hig | 0.57 | 8.8 | 0.00 | May 14, 2025 | Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access. | ||
| CVE-2025-0147 | Hig | 0.57 | 8.8 | 0.01 | Jan 30, 2025 | Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation of privilege via network access. | ||
| CVE-2025-27440 | Hig | 0.55 | 8.5 | 0.00 | Mar 11, 2025 | Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. | ||
| CVE-2025-27439 | Hig | 0.55 | 8.5 | 0.00 | Mar 11, 2025 | Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. | ||
| CVE-2025-0151 | Hig | 0.55 | 8.5 | 0.00 | Mar 11, 2025 | Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. | ||
| CVE-2025-46788 | Hig | 0.48 | 7.4 | 0.00 | Jul 10, 2025 | Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access. | ||
| CVE-2025-0150 | Hig | 0.46 | 7.1 | 0.00 | Mar 11, 2025 | Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access. | ||
| CVE-2025-30664 | Med | 0.43 | 6.6 | 0.00 | May 14, 2025 | Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access. | ||
| CVE-2025-46785 | Med | 0.42 | 6.5 | 0.01 | May 14, 2025 | Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. | ||
| CVE-2025-30668 | Med | 0.42 | 6.5 | 0.01 | May 14, 2025 | Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access. | ||
| CVE-2025-30667 | Med | 0.42 | 6.5 | 0.01 | May 14, 2025 | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. | ||
| CVE-2024-45424 | Med | 0.34 | 5.3 | 0.00 | Feb 25, 2025 | Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access. | ||
| CVE-2024-45426 | Med | 0.32 | 4.9 | 0.00 | Feb 25, 2025 | Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access. | ||
| CVE-2024-45425 | Med | 0.32 | 4.9 | 0.00 | Feb 25, 2025 | Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access. | ||
| CVE-2025-27442 | Med | 0.30 | 4.6 | 0.00 | Apr 8, 2025 | Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access. | ||
| CVE-2025-27441 | Med | 0.30 | 4.6 | 0.00 | Apr 8, 2025 | Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access. | ||
| CVE-2025-46786 | Med | 0.28 | 4.3 | 0.00 | May 14, 2025 | Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access. | ||
| CVE-2025-0143 | Med | 0.28 | 4.3 | 0.00 | Jan 30, 2025 | Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a denial of service via network access. | ||
| CVE-2025-0146 | Low | 0.25 | 3.9 | 0.00 | Jan 30, 2025 | Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access. | ||
| CVE-2025-0144 | Low | 0.20 | 3.1 | 0.00 | Jan 30, 2025 | Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access. |
- risk 0.57cvss 8.8epss 0.00
Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
- risk 0.57cvss 8.8epss 0.01
Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation of privilege via network access.
- risk 0.55cvss 8.5epss 0.00
Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
- risk 0.55cvss 8.5epss 0.00
Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
- risk 0.55cvss 8.5epss 0.00
Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
- risk 0.48cvss 7.4epss 0.00
Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access.
- risk 0.46cvss 7.1epss 0.00
Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access.
- risk 0.43cvss 6.6epss 0.00
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
- risk 0.42cvss 6.5epss 0.01
Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
- risk 0.42cvss 6.5epss 0.01
Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
- risk 0.42cvss 6.5epss 0.01
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
- risk 0.34cvss 5.3epss 0.00
Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
- risk 0.32cvss 4.9epss 0.00
Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
- risk 0.32cvss 4.9epss 0.00
Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
- risk 0.30cvss 4.6epss 0.00
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
- risk 0.30cvss 4.6epss 0.00
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
- risk 0.28cvss 4.3epss 0.00
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.
- risk 0.28cvss 4.3epss 0.00
Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a denial of service via network access.
- risk 0.25cvss 3.9epss 0.00
Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access.
- risk 0.20cvss 3.1epss 0.00
Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access.