CVE-2025-27439

Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Buffer Underflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
ZoomCNA
8.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
VendorProductVersion
zoommeeting_software_development_kit
𝑥
< 6.3.0
zoommeeting_software_development_kit
𝑥
< 6.3.0
zoommeeting_software_development_kit
𝑥
< 6.3.0
zoomrooms
𝑥
< 6.3.0
zoomrooms
𝑥
< 6.3.0
zoomrooms
𝑥
< 6.3.0
zoomrooms_controller
𝑥
< 6.3.0
zoomrooms_controller
𝑥
< 6.3.0
zoomrooms_controller
𝑥
< 6.3.0
zoomworkplace_desktop
𝑥
< 6.3.0
zoomworkplace_desktop
𝑥
< 6.3.0
zoomworkplace_desktop
𝑥
< 6.3.0
zoomworkplace_virtual_desktop_infrastructure
𝑥
< 6.1.16
zoomworkplace_virtual_desktop_infrastructure
6.1.17 ≤
𝑥
< 6.2.12
𝑥
= Vulnerable software versions