Skip to content
OpenAdvisories
Medium WID-SEC-2025-1506 5 CVEs

Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen

Published Jul 8, 2025 · Updated Jul 10, 2025 · Revision 2 · de-DE

Vendor: Zoom Video Communications Product: Rooms Product: Workplace Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Zoom Video Communications Workplace und Rooms ausnutzen, um Informationen preiszugeben, einen Denial-of-Service-Zustand herbeizuführen, Cross-Site-Scripting-Angriffe durchzuführen oder nicht spezifizierte Auswirkungen zu verursachen.

Product

Zoom Workplace ist eine Plattform, die Videokonferenz-, Chat-, Telefon- und Collaboration-Tools integriert, um Remote- und Hybrid-Arbeitsumgebungen in Unternehmen zu unterstützen.
Zoom Rooms ist ein softwarebasiertes Raumsystem, das integrierte Audiokonferenzen, drahtlose Bildschirmfreigabe und Videokonferenzen ermöglicht.

Vulnerabilities 5

  • High 7.4
    CVE-2025-46788

    Zoom Workplace for Linux - Improper Certificate Validation

    Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access.

    Zoom Communications Zoom Workplace for Linux Linux
  • Medium 6.5
    CVE-2025-46789

    Zoom Clients for Windows - Classic Buffer Overflow

    Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access.

    Zoom Communications Zoom Clients for Windows Windows
  • Medium 6.5
    CVE-2025-49463

    Zoom Clients for iOS - Insufficient Control Flow Management

    Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access.

    Zoom Communications Zoom Clients for iOS iOS
  • Medium 6.5
    CVE-2025-49464

    Zoom Clients for Windows- Classic Buffer Overflow

    Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access.

    Zoom Communications Zoom Clients for Windows Windows
  • Low 3.5
    CVE-2025-49462

    Zoom Clients - Cross-site Scripting

    Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.

    Zoom Communications Zoom Clients

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-21010, EUVD-2025-21022, EUVD-2025-21011, EUVD-2025-21012, EUVD-2025-21008

  2. #1

    Initiale Fassung

References