Zoom Security Updates – 14 May 2025

The addressed vulnerabilities could allow the attacker to conduct a denial of service attack, perform a cross-site scripting attack, bypass security restrictions, or gain elevated privileges to the affected systems.

Sample of the addressed vulnerabilities:

1. Zoom Workplace Apps – Time-of-check Time-of-use Privilege Escalation (CVE- 2025-30663):

• CVSS: 8.8
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Privileges

2. Zoom Workplace Apps for Windows – Integer Underflow (CVE-2025-30668):

• CVSS: 6.5
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Denial of Service