CVE-2025-27440CWE-124

Zoom Apps - Heap-based Buffer Overflow

High · published March 11, 2025

CVSS v3.1
8.5
EPSS
0%
Percentile
37.9
In the wild
Unconfirmed
What it is

Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00448 · 37.9th percentile
Weakness
CWE-124 · Buffer Underwrite ('Buffer Underflow')
Published
2025-03-11T17:11Z
EPSS history
Timeline
  • 11 MAR 17:11Z
    Zoom Apps - Heap-based Buffer Overflow
    cvelistv5