Skip to content
OpenAdvisories
High WID-SEC-2025-0514 5 CVEs

Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen

Published Mar 10, 2025 · Updated Mar 10, 2025 · de-DE

Vendor: Zoom Video Communications Product: Rooms Product: Workplace Platform: Android Platform: iOS Platform: Linux Platform: macOS Platform: Windows

Summary

Ein anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Zoom Video Communications Workplace und Zoom Video Communications Rooms ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen und erhöhte Berechtigungen zu erlangen.

Product

Zoom Workplace ist eine Plattform, die Videokonferenz-, Chat-, Telefon- und Collaboration-Tools integriert, um Remote- und Hybrid-Arbeitsumgebungen in Unternehmen zu unterstützen.
Zoom Rooms ist ein softwarebasiertes Raumsystem, das integrierte Audiokonferenzen, drahtlose Bildschirmfreigabe und Videokonferenzen ermöglicht.

Vulnerabilities 5

  • High 8.5
    CVE-2025-0151

    Zoom Apps - Use After Free

    Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.

    Zoom Communications Zoom Workplace Apps
  • High 8.5
    CVE-2025-27439

    Zoom Apps - Buffer Underflow

    Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.

    Zoom Communications Zoom Workplace Apps
  • High 8.5
    CVE-2025-27440

    Zoom Apps - Heap-based Buffer Overflow

    Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.

    Zoom Communications Zoom Workplace Apps
  • High 7.1
    CVE-2025-0150

    Zoom Workplace Apps for iOS - Incorrect Behavior Order

    Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access.

    Zoom Communications Zoom Workplace Apps for iOS iOS
  • Medium 6.5
    CVE-2025-0149

    Zoom Apps - Insufficient Verification of Data Authenticity

    Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.

    Zoom Communications Zoom Apps

Revision history

  1. #1

    Initiale Fassung

References