PatchTheCVE: rooms controllerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-58135: Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user tohttps://patchthecve.com/cve/CVE-2025-58135.htmlhttps://patchthecve.com/cve/CVE-2025-58135.htmlWed, 17 Jun 2026 09:43:57 +0000MEDIUM 5.3: Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.CVE-2025-58134: Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduhttps://patchthecve.com/cve/CVE-2025-58134.htmlhttps://patchthecve.com/cve/CVE-2025-58134.htmlWed, 17 Jun 2026 09:43:57 +0000MEDIUM 4.3: Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access.CVE-2025-49457: Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escahttps://patchthecve.com/cve/CVE-2025-49457.htmlhttps://patchthecve.com/cve/CVE-2025-49457.htmlWed, 17 Jun 2026 09:31:20 +0000CRITICAL 9.6: Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network accessCVE-2025-49456: Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impahttps://patchthecve.com/cve/CVE-2025-49456.htmlhttps://patchthecve.com/cve/CVE-2025-49456.htmlWed, 17 Jun 2026 09:31:20 +0000MEDIUM 6.2: Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access.CVE-2025-46785: Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial ohttps://patchthecve.com/cve/CVE-2025-46785.htmlhttps://patchthecve.com/cve/CVE-2025-46785.htmlWed, 17 Jun 2026 09:26:56 +0000MEDIUM 6.5: Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.CVE-2025-30666: NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a https://patchthecve.com/cve/CVE-2025-30666.htmlhttps://patchthecve.com/cve/CVE-2025-30666.htmlWed, 17 Jun 2026 09:09:08 +0000MEDIUM 6.5: NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.CVE-2025-30665: NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a https://patchthecve.com/cve/CVE-2025-30665.htmlhttps://patchthecve.com/cve/CVE-2025-30665.htmlWed, 17 Jun 2026 09:09:08 +0000MEDIUM 6.5: NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.CVE-2025-30671: Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a https://patchthecve.com/cve/CVE-2025-30671.htmlhttps://patchthecve.com/cve/CVE-2025-30671.htmlWed, 17 Jun 2026 09:09:09 +0000MEDIUM 6.5: Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.CVE-2025-30670: Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a https://patchthecve.com/cve/CVE-2025-30670.htmlhttps://patchthecve.com/cve/CVE-2025-30670.htmlWed, 17 Jun 2026 09:09:09 +0000MEDIUM 6.5: Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.CVE-2025-27443: Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated ushttps://patchthecve.com/cve/CVE-2025-27443.htmlhttps://patchthecve.com/cve/CVE-2025-27443.htmlWed, 17 Jun 2026 09:03:35 +0000LOW 2.8: Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access.CVE-2024-45426: Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an informatihttps://patchthecve.com/cve/CVE-2024-45426.htmlhttps://patchthecve.com/cve/CVE-2024-45426.htmlWed, 17 Jun 2026 07:54:11 +0000MEDIUM 4.9: Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.CVE-2025-0146: Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated uhttps://patchthecve.com/cve/CVE-2025-0146.htmlhttps://patchthecve.com/cve/CVE-2025-0146.htmlWed, 17 Jun 2026 08:25:58 +0000LOW 3.9: Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access.CVE-2025-0145: Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user thttps://patchthecve.com/cve/CVE-2025-0145.htmlhttps://patchthecve.com/cve/CVE-2025-0145.htmlWed, 17 Jun 2026 08:25:58 +0000MEDIUM 4.6: Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.CVE-2024-39822: Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allhttps://patchthecve.com/cve/CVE-2024-39822.htmlhttps://patchthecve.com/cve/CVE-2024-39822.htmlWed, 17 Jun 2026 07:42:52 +0000MEDIUM 6.5: Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.