CVE-2025-27443lowCWE-1188

CVE-2025-27443: falha de baixa gravidade em Zoom Workplace Apps for Windows

Zoom Workplace Apps for Windows - Insecure Default Variable Initialization

Publicada em

Seguir esta CVE+ Monitorar Zoom Workplace Apps

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 2.8epss 0.2%
Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Zoom Communications, Inc · Zoom Workplace Apps for Windows
CVEs relacionadas — Zoom Workplace Apps for Windows

No mesmo produto, das mais perigosas para as menos.

CVE-2025-30666MEDIUMZoom Workplace Apps for Windows - NULL Pointer DereferenceEPSS 0.6%CVE-2025-30665MEDIUMZoom Workplace Apps for Windows - NULL Pointer DereferenceEPSS 0.6%CVE-2025-30670MEDIUMZoom Workplace Apps for Windows - Null PointerEPSS 0.4%CVE-2025-30671MEDIUMZoom Workplace Apps for Windows - Null PointerEPSS 0.4%CVE-2025-0145MEDIUMZoom Workplace Apps for Windows - Untrusted Search PathEPSS 0.2%