CVE-2025-27443CWE-1188

Zoom Workplace Apps for Windows - Insecure Default Variable Initialization

Low · published April 8, 2025

CVSS v3.1
2.8
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access.

The record
Technical detail
CVSS v3.1
2.8 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00164 · 5.3th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2025-04-08T16:16Z
EPSS history
Timeline
  • 08 APR 16:16Z
    Zoom Workplace Apps for Windows - Insecure Default Variable Initialization
    cvelistv5