Threat database

12 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.6	EPSS 0.1%	CVE-2025-58131Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon · Time-of-check Time-of-use (TOCTOU) Race Condition Medium6.6EPSS 0.1%2025-09-09CVE Database V5CVE-2025-58131 Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or before 6.2.15 and 6.3.12 in their respective tracks) may allow an authenticated user to conduct a disclosure of information via network access. EPSS 0.1%Vulnerability Zoom Communications, Inc #cwe-367	CVE Database V5	2025-09-09
Medium	5.3	EPSS 0.3%	CVE-2025-58135Zoom Workplace Clients for Windows · Improper Enforcement of a Single, Unique Action Medium5.3EPSS 0.3%2025-09-09CVE Database V5CVE-2025-58135 Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access. EPSS 0.3%Vulnerability Zoom Communications, Inc #cwe-837	CVE Database V5	2025-09-09
Medium	4.3	EPSS 0.2%	CVE-2025-58134Zoom Workplace Clients for Windows · Incorrect Authorization Medium4.3EPSS 0.2%2025-09-09CVE Database V5CVE-2025-58134 Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access. EPSS 0.2%Vulnerability Zoom Communications, Inc #cwe-863	CVE Database V5	2025-09-09
Medium	4.3	EPSS 0.3%	CVE-2025-49461Zoom Workplace Clients · Cross-site Scripting Medium4.3EPSS 0.3%2025-09-09CVE Database V5CVE-2025-49461 Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. EPSS 0.3%Vulnerability Zoom Communications, Inc #cwe-79	CVE Database V5	2025-09-09
Medium	4.3	EPSS 0.3%	CVE-2025-49460Zoom Workplace Clients · Uncontrolled Resource Consumption Medium4.3EPSS 0.3%2025-09-09CVE Database V5CVE-2025-49460 Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. EPSS 0.3%Vulnerability Zoom Communications, Inc #cwe-400	CVE Database V5	2025-09-09
High	7.8	EPSS 0.1%	CVE-2025-49459Zoom Workplace for Windows on ARM · Missing Authorization High7.8EPSS 0.1%2025-09-09CVE Database V5CVE-2025-49459 Missing authorization in the installer for Zoom Workplace for Windows on ARM before version 6.5.0 may allow an authenticated user to conduct an escalation of privilege via local access. EPSS 0.1%Vulnerability Zoom Communications, Inc #cwe-862	CVE Database V5	2025-09-09
Medium	6.5	EPSS 0.3%	CVE-2025-49458Zoom Workplace Clients · Classic Buffer Overflow Medium6.5EPSS 0.3%2025-09-09CVE Database V5CVE-2025-49458 Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access. EPSS 0.3%Vulnerability Zoom Communications, Inc #cwe-120	CVE Database V5	2025-09-09
Medium	4.6	EPSS 0.2%	CVE-2025-27442Zoom Workplace Apps · cross-site scripting Medium4.6EPSS 0.2%2025-04-08CVE Database V5CVE-2025-27442 Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access. EPSS 0.2%Vulnerability Zoom Communications, Inc #cwe-79	CVE Database V5	2025-04-08
Medium	4.6	EPSS 0.3%	CVE-2025-27441Zoom Workplace Apps · cross-site scripting Medium4.6EPSS 0.3%2025-04-08CVE Database V5CVE-2025-27441 Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access. EPSS 0.3%Vulnerability Zoom Communications, Inc #cwe-79	CVE Database V5	2025-04-08
Medium	4.3	EPSS 0.6%	CVE-2024-27239Zoom Workplace Apps and SDKs · Use After Free Medium4.3EPSS 0.6%2025-02-25CVE Database V5CVE-2024-27239 Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. EPSS 0.6%Vulnerability Zoom Communications, Inc #cwe-416	CVE Database V5	2025-02-25
Medium	6.7	EPSS <0.1%	CVE-2024-39819Zoom Workplace Apps and SDK for Windows · Download of Code Without Integrity Check Medium6.7EPSS <0.1%2024-07-15CVE Database V5CVE-2024-39819 Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access. EPSS <0.1%Vulnerability Zoom Communications, Inc #cwe-494	CVE Database V5	2024-07-15
Medium	6.8	EPSS 0.4%	CVE-2024-39826Zoom Workplace Apps and SDKs · Time-of-check Time-of-use (TOCTOU) Race Condition Medium6.8EPSS 0.4%2024-07-15CVE Database V5CVE-2024-39826 Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access. EPSS 0.4%Vulnerability Zoom Communications, Inc #cwe-367	CVE Database V5	2024-07-15

Showing 1–12 of 12 results