Overview 795 matches · 9 in Waratek scope · 2 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
795matches
9in Waratek scope1.1%
2protected0.3%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
2
0.3%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
7
0.9%
Outside Waratek scope
36
4.5%
Not applicable
750
94.3%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
0.3%
partly blocked
0
0.0%
not blocked
793
99.7%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
795
100.0%
split by
peak 118 / year
20071
Not applicable1
Low1
not blocked1
No public exploit1
20084
Not applicable4
High3
Medium1
not blocked4
No public exploit4
20094
Not applicable4
High1
Low3
not blocked4
No public exploit4
201010
Not applicable10
High1
Medium3
Low6
not blocked10
No public exploit10
20118
Not applicable8
High2
Medium5
Low1
not blocked8
No public exploit8
201252
No exploit published1
Not applicable51
High38
Medium13
Low1
not blocked52
No public exploit52
201351
Not applicable51
Critical6
High23
Medium21
Low1
not blocked51
No public exploit51
201467
Outside Waratek scope7
Not applicable60
Critical5
High18
Medium40
Low4
not blocked67
No public exploit67
201556
No exploit published2
Outside Waratek scope8
Not applicable46
Critical1
High18
Medium28
Low9
not blocked56
No public exploit56
201663
Protected by Waratek1
No exploit published2
Outside Waratek scope2
Not applicable58
Critical12
High19
Medium32
blocked by ARMR today1
not blocked62
No public exploit63
201734
Not applicable34
Critical11
High16
Medium7
not blocked34
No public exploit34
20185
Outside Waratek scope1
Not applicable4
Critical1
High2
Medium2
not blocked5
No public exploit5
201912
Outside Waratek scope2
Not applicable10
Critical1
High6
Medium5
not blocked12
No public exploit12
202039
Outside Waratek scope2
Not applicable37
Critical2
High20
Medium15
Low2
not blocked39
No public exploit39
202163
No exploit published1
Outside Waratek scope7
Not applicable55
Critical7
High42
Medium11
Low3
not blocked63
No public exploit63
202252
No exploit published1
Outside Waratek scope4
Not applicable47
Critical8
High28
Medium16
not blocked52
No public exploit52
202365
Not applicable65
Critical8
High38
Medium17
Low2
not blocked65
No public exploit65
202463
Protected by Waratek1
Not applicable62
Critical7
High23
Medium32
Low1
blocked by ARMR today1
not blocked62
No public exploit63
2025118
Outside Waratek scope3
Not applicable115
Critical13
High47
Medium58
not blocked118
No public exploit118
202628
Not applicable28
High13
Medium15
not blocked28
No public exploit28
2008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-34620 | Medium | 2026-08-27 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-34616 | Medium | 2026-08-27 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information from memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-19643 | Medium | 2026-08-12 | Not applicable | No public exploit | An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862. |
| CVE-2026-19642 | Medium | 2026-08-12 | Not applicable | No public exploit | An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862. |
| CVE-2026-10710 | High | 2026-08-04 | Not applicable | No public exploit | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. |
| CVE-2026-10709 | High | 2026-08-04 | Not applicable | No public exploit | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. |
| CVE-2026-48389 | High | 2026-07-20 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-48267 | Medium | 2026-07-06 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-47964 | High | 2026-06-16 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-47963 | Medium | 2026-06-16 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-47934 | Medium | 2026-06-16 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-47927 | Medium | 2026-06-16 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-53408 | High | 2026-06-12 | Not applicable | No public exploit | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access. |
| CVE-2026-4870 | High | 2026-06-12 | Not applicable | No public exploit | IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker to trigger a segmentation fault leading to a denial of service due to uncontrolled recursion in the parser. |
| CVE-2026-27258 | Medium | 2026-04-14 | Not applicable | No public exploit | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed. |
| CVE-2026-30900 | High | 2026-03-11 | Not applicable | No public exploit | Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access. |
| CVE-2026-27281 | Medium | 2026-03-10 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2471 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-27280 | High | 2026-03-10 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2471 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-20430 | High | 2026-03-02 | Not applicable | No public exploit | In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151. |
| CVE-2026-27704 | Medium | 2026-02-25 | Not applicable | No public exploit | The Dart and Flutter SDKs provide software development kits for the Dart programming language. In versions of the Dart SDK prior to 3.11.0 and the Flutter SDK prior to version 3.41.0, when the pub client (`dart pub` and `flutter pub`) extracts a package in the pub cache, a malicious package archive can have files extracted outside the destination directory in the `PUB_CACHE`. A fix has been landed in commit 26c6985c742593d081f8b58450f463a584a4203a. By normalizing the file path before writing file, the attacker can no longer traverse up via a symlink. This patch is released in Dart 3.11.0 and Flutter 3.41.0.vAll packages on pub.dev have been vetted for this vulnerability. New packages are no longer allowed to contain symlinks. The pub client itself doesn't upload symlinks, but duplicates the linked entry, and has been doing this for years. Those whose dependencies are all from pub.dev, third-party repositories trusted to not contain malicious code, or git dependencies are not affected by this vulnerability. |
| CVE-2026-21355 | Medium | 2026-02-10 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-21354 | Medium | 2026-02-10 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-21353 | High | 2026-02-10 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-21352 | High | 2026-02-10 | Not applicable | No public exploit | DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2025-12131 | Medium | 2026-02-05 | Not applicable | No public exploit | A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service. |
| CVE-2026-20419 | Medium | 2026-02-02 | Not applicable | No public exploit | In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 / WCNCR00463309; Issue ID: MSV-4852. |
| CVE-2026-20408 | High | 2026-02-02 | Not applicable | No public exploit | In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461651; Issue ID: MSV-4758. |
| CVE-2026-21219 | High | 2026-01-13 | Not applicable | No public exploit | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
| CVE-2025-64894 | Medium | 2025-12-09 | Not applicable | No public exploit | DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this issue to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2025-64893 | High | 2025-12-09 | Not applicable | No public exploit | DNG SDK versions 1.7.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure or application denial of service. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2025-64784 | High | 2025-12-09 | Not applicable | No public exploit | DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2025-64783 | High | 2025-12-09 | Not applicable | No public exploit | DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2025-64741 | Critical | 2025-11-13 | Not applicable | No public exploit | Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access. |
| CVE-2025-64739 | High | 2025-11-13 | Not applicable | No public exploit | External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access. |
| CVE-2025-64738 | Medium | 2025-11-13 | Not applicable | No public exploit | External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access. |
| CVE-2025-62484 | Critical | 2025-11-13 | Not applicable | No public exploit | Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access. |
| CVE-2025-62483 | High | 2025-11-13 | Not applicable | No public exploit | Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access. |
| CVE-2025-62482 | Medium | 2025-11-13 | Not applicable | No public exploit | Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access. |
| CVE-2025-30669 | Medium | 2025-11-13 | Not applicable | No public exploit | Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access. |
| CVE-2025-20748 | Medium | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432679; Issue ID: MSV-3950. |
| CVE-2025-20742 | High | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00432680; Issue ID: MSV-3949. |
| CVE-2025-20741 | Medium | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; Issue ID: MSV-3958. |
| CVE-2025-20740 | Medium | 2025-11-04 | Not applicable | No public exploit | In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435337; Issue ID: MSV-4036. |
| CVE-2025-20739 | Medium | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435340; Issue ID: MSV-4038. |
| CVE-2025-20738 | Medium | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435342; Issue ID: MSV-4039. |
| CVE-2025-20737 | High | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435343; Issue ID: MSV-4040. |
| CVE-2025-20736 | Medium | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435347; Issue ID: MSV-4049. |
| CVE-2025-20735 | High | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; Issue ID: MSV-4051. |
| CVE-2025-20734 | Medium | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441507; Issue ID: MSV-4112. |
| CVE-2025-20733 | High | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00441509; Issue ID: MSV-4138. |
| CVE-2025-20732 | Medium | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441510; Issue ID: MSV-4139. |
| CVE-2025-20731 | Medium | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441511; Issue ID: MSV-4140. |
| CVE-2025-20729 | Medium | 2025-11-04 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441512; Issue ID: MSV-4153. |
| CVE-2025-20728 | High | 2025-11-04 | Not applicable | No public exploit | In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276. |
| CVE-2025-58132 | Medium | 2025-10-15 | Not applicable | No public exploit | Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access. |
| CVE-2025-20724 | Medium | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418894; Issue ID: MSV-3475. |
| CVE-2025-20720 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418954; Issue ID: MSV-3569. |
| CVE-2025-20719 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418955; Issue ID: MSV-3570. |
| CVE-2025-20718 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00419945; Issue ID: MSV-3581. |
| CVE-2025-20717 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00419946; Issue ID: MSV-3582. |
| CVE-2025-20716 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421149; Issue ID: MSV-3728. |
| CVE-2025-20715 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421152; Issue ID: MSV-3731. |
| CVE-2025-20714 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432659; Issue ID: MSV-3902. |
| CVE-2025-20713 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432661; Issue ID: MSV-3904. |
| CVE-2025-20712 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID: MSV-3810. |
| CVE-2025-20711 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422399; Issue ID: MSV-3748. |
| CVE-2025-20710 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418785; Issue ID: MSV-3515. |
| CVE-2025-20709 | High | 2025-10-14 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415809; Issue ID: MSV-3405. |
| CVE-2025-58135 | Medium | 2025-09-09 | Not applicable | No public exploit | Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access. |
| CVE-2025-58134 | Medium | 2025-09-09 | Not applicable | No public exploit | Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access. |
| CVE-2025-49461 | High | 2025-09-09 | Not applicable | No public exploit | Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. |
| CVE-2025-49460 | High | 2025-09-09 | Not applicable | No public exploit | Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. |
| CVE-2025-49458 | Medium | 2025-09-09 | Not applicable | No public exploit | Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-49457 | Critical | 2025-08-12 | Not applicable | No public exploit | Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access |
| CVE-2025-49456 | Medium | 2025-08-12 | Not applicable | No public exploit | Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access. |
| CVE-2025-20695 | Medium | 2025-07-08 | Not applicable | No public exploit | In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09741871; Issue ID: MSV-3317. |
| CVE-2025-20694 | Medium | 2025-07-08 | Not applicable | No public exploit | In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09752821; Issue ID: MSV-3342. |
| CVE-2025-20693 | Medium | 2025-07-08 | Not applicable | No public exploit | In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09812521; Issue ID: MSV-3421. |
| CVE-2025-20692 | Medium | 2025-07-08 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418040; Issue ID: MSV-3476. |
| CVE-2025-20691 | Medium | 2025-07-08 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418039; Issue ID: MSV-3477. |
| CVE-2025-20690 | Medium | 2025-07-08 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418038; Issue ID: MSV-3478. |
| CVE-2025-20689 | Medium | 2025-07-08 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418048; Issue ID: MSV-3479. |
| CVE-2025-20688 | Medium | 2025-07-08 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418047; Issue ID: MSV-3480. |
| CVE-2025-20686 | High | 2025-07-08 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415570; Issue ID: MSV-3404. |
| CVE-2025-20685 | High | 2025-07-08 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409. |
| CVE-2025-20684 | Critical | 2025-07-08 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue ID: MSV-3422. |
| CVE-2025-20683 | Critical | 2025-07-08 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444. |
| CVE-2025-20682 | Critical | 2025-07-08 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445. |
| CVE-2025-20681 | Critical | 2025-07-08 | Not applicable | No public exploit | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446. |
| CVE-2025-47962 | High | 2025-06-10 | Not applicable | No public exploit | Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally. |
| CVE-2025-20674 | Critical | 2025-06-02 | Not applicable | No public exploit | In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303. |
| CVE-2025-46786 | Medium | 2025-05-14 | Not applicable | No public exploit | Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access. |
| CVE-2025-46785 | Medium | 2025-05-14 | Not applicable | No public exploit | Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-30668 | Medium | 2025-05-14 | Not applicable | No public exploit | Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-30667 | Medium | 2025-05-14 | Not applicable | No public exploit | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-30666 | Medium | 2025-05-14 | Not applicable | No public exploit | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-30665 | Medium | 2025-05-14 | Not applicable | No public exploit | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2025-30664 | High | 2025-05-14 | Not applicable | No public exploit | Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access. |
| CVE-2025-30663 | High | 2025-05-14 | Not applicable | No public exploit | Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access. |
| CVE-2025-30422 | Medium | 2025-04-30 | Not applicable | No public exploit | A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an unexpected app termination. |