Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior
Críticas / altas1389▼ 28 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
–

143 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaMedia (6.5)0.55%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace Desktop+114/5/202517/6/2026
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
AnalizadaMedia (6.5)0.55%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace Desktop+114/5/202517/6/2026
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
AnalizadaAlta (8.2)0.27%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace+214/5/202517/6/2026
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
AnalizadaAlta (7)0.15%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace+214/5/202517/6/2026
Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
AnalizadaMedia (6.5)0.40%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace Desktop+18/4/202517/6/2026
Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
AnalizadaMedia (6.5)0.42%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace Desktop+18/4/202517/6/2026
Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
AnalizadaMedia (5.5)0.16%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace Desktop8/4/202517/6/2026
Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access.
ModificadaMedia (5.2)0.24%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace+28/4/202517/6/2026
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
ModificadaMedia (5.2)0.26%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace+28/4/202517/6/2026
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
AnalizadaAlta (8.8)0.45%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace+211/3/202517/6/2026
Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
AnalizadaAlta (8.8)0.44%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace+211/3/202517/6/2026
Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
AnalizadaAlta (8.8)0.44%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace+211/3/202517/6/2026
Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
AnalizadaAlta (7.5)0.25%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace+211/3/202517/6/2026
Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.
AnalizadaMedia (6.5)0.64%—Zoom Meeting Software Development KITZoom RoomsZoom WorkplaceZoom Workplace Desktop+125/2/202517/6/2026
Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
AnalizadaMedia (6.5)0.64%—Zoom Meeting Software Development KITZoom RoomsZoom WorkplaceZoom Workplace Desktop+125/2/202517/6/2026
Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
ModificadaMedia (6.5)0.64%—Zoom Meeting Software Development KITZoom RoomsZoom WorkplaceZoom Workplace Desktop+125/2/202517/6/2026
Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
AnalizadaMedia (6.5)0.32%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace+225/2/202517/6/2026
Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
AnalizadaMedia (6.5)0.32%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace+225/2/202517/6/2026
Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access.
AnalizadaAlta (7.5)0.37%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Workplace+225/2/202517/6/2026
Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
AnalizadaAlta (8.8)0.61%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Video Software Development KIT+325/2/202517/6/2026
Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.
AnalizadaAlta (8.8)0.48%—Zoom Meeting Software Development KITZoom RoomsZoom Video Software Development KITZoom Workplace Desktop25/2/202517/6/2026
Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.
AnalizadaMedia (5.5)0.19%—Zoom Meeting Software Development KITZoom RoomsZoom Video Software Development KITZoom Workplace Desktop25/2/202517/6/2026
Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access.
AnalizadaMedia (5)0.23%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Video Software Development KIT+130/1/202517/6/2026
Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access.
AnalizadaAlta (7.8)0.21%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Video Software Development KIT+230/1/202517/6/2026
Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.
AnalizadaMedia (6.5)0.34%—Zoom Meeting Software Development KITZoom RoomsZoom Rooms ControllerZoom Video Software Development KIT+330/1/202517/6/2026
Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access.
Orbitaley — Vulnerabilidades