CVE-2025-30671

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Apr 8, 2025
CWE ID 476

Summary

CVE-2025-30671 is a newly disclosed vulnerability affecting some Zoom Workplace Apps for Windows. This issue involves a null pointer dereference, which can be exploited by an authenticated user to carry out a denial-of-service (DoS) attack via network access. The vulnerability arises from a coding error that allows a specially crafted input to trigger the dereference of a null pointer, resulting in application crashes or unexpected behavior. Successful exploitation of this vulnerability can lead to significant disruptions or downtime for affected organizations. It is strongly recommended that users update their Zoom Workplace Apps for Windows to the latest version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share