CVE-2025-27440

EUVD-2025-7783
Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Buffer Underflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
ZoomCNA
8.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
Affected Products (NVD)
VendorProductVersion
zoommeeting_software_development_kit
𝑥
< 6.3.0
zoommeeting_software_development_kit
𝑥
< 6.3.0
zoommeeting_software_development_kit
𝑥
< 6.3.0
zoomrooms
𝑥
< 6.3.0
zoomrooms
𝑥
< 6.3.0
zoomrooms
𝑥
< 6.3.0
zoomrooms_controller
𝑥
< 6.3.0
zoomrooms_controller
𝑥
< 6.3.0
zoomrooms_controller
𝑥
< 6.3.0
zoomworkplace_desktop
𝑥
< 6.3.0
zoomworkplace_desktop
𝑥
< 6.3.0
zoomworkplace_desktop
𝑥
< 6.3.0
zoomworkplace_virtual_desktop_infrastructure
𝑥
< 6.1.16
zoomworkplace_virtual_desktop_infrastructure
6.1.17 ≤
𝑥
< 6.2.12
𝑥
= Vulnerable software versions