Summary
Ein Angreifer kann mehrere Schwachstellen in Zoom Video Communications Workplace und Zoom Video Communications Rooms ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen und andere nicht spezifizierte Angriffe durchzuführen.
Product
Zoom Workplace ist eine Plattform, die Videokonferenz-, Chat-, Telefon- und Collaboration-Tools integriert, um Remote- und Hybrid-Arbeitsumgebungen in Unternehmen zu unterstützen.
Zoom Rooms ist ein softwarebasiertes Raumsystem, das integrierte Audiokonferenzen, drahtlose Bildschirmfreigabe und Videokonferenzen ermöglicht.
Vulnerabilities 7
-
High 8.8
Zoom Workplace Apps - Time-of-check Time-of-use
Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
-
Medium 6.6
Zoom Workplace Apps - Cross-site Scripting
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
-
Medium 6.5
Zoom Workplace Apps for Windows - NULL Pointer Dereference
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
-
Medium 6.5
Zoom Workplace Apps for Windows - NULL Pointer Dereference
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
-
Medium 6.5
Zoom Workplace Apps - NULL Pointer Dereference
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
-
Medium 6.5
Zoom Workplace Apps - NULL Pointer Dereference
Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
-
Medium 6.5
Zoom Workplace Apps for Windows - Buffer Over-read
Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
Revision history
-
#1
Initiale Fassung
References
-
ZOOM Security Bulletin vom 2025-05-12
https://www.zoom.com/en/trust/security-bulletin/zsb-25016/
-
ZOOM Security Bulletin vom 2025-05-12
https://www.zoom.com/en/trust/security-bulletin/zsb-25017/
-
ZOOM Security Bulletin vom 2025-05-12
https://www.zoom.com/en/trust/security-bulletin/zsb-25018/
-
ZOOM Security Bulletin vom 2025-05-12
https://www.zoom.com/en/trust/security-bulletin/zsb-25019/
-
ZOOM Security Bulletin vom 2025-05-12
https://www.zoom.com/en/trust/security-bulletin/zsb-25020/
-
ZOOM Security Bulletin vom 2025-05-12
https://www.zoom.com/en/trust/security-bulletin/zsb-25021/
-
ZOOM Security Bulletin vom 2025-05-12
https://www.zoom.com/en/trust/security-bulletin/zsb-25022/