Insecure Default Variable Initialization in Zoom Workplace Apps for Windows
CVE-2025-27443

5.5MEDIUM

Key Information:

Vendor

Zoom Communications, Inc

Status
Zoom Workplace Apps For Windows
Vendor
CVE Published:
8 April 2025

What is CVE-2025-27443?

Insecure default variable initialization in specific versions of Zoom Workplace Apps for Windows could allow an authenticated user to manipulate system integrity through local access. This vulnerability may lead to unauthorized actions by leveraging improperly managed variables, necessitating immediate attention from users to secure their installations.

Affected Version(s)

Zoom Workplace Apps for Windows Windows See references.

References

https://www.zoom.com/en/trust/security-bulletin/zsb-25014

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.