Known vulnerabilities in Virtual Desktop Infrastructure (VDI) - page 2

Vendor: Zoom Video Communications, Inc.
Software: Virtual Desktop Infrastructure (VDI)
Software CPE: cpe:2.3:a:zoom_video_communications:vdi:*:*:*:*:*:*:*:*
Website: https://zoom.us/
Total vulnerabilities: 74
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Virtual Desktop Infrastructure (VDI) Virtual Desktop Infrastructure (VDI) is affected by 74 known vulnerabilities: 12 high, 21 medium, 41 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109406 - Improper input validation
CVE-2025-46787		 CWE-20 Medium
No
No
 6.1.17.25840, 6.2.13.25860, 6.3.10.25910 19.05.2025 SB2025051313
#VU109009 - Improper input validation
CVE-2025-46786		 CWE-20 Medium
No
No
 6.1.17.25840, 6.2.13.25860, 6.3.10.25910 13.05.2025 SB2025051313
#VU109008 - Buffer over-read
CVE-2025-46785		 CWE-126 Low
No
No
 6.1.17.25840, 6.2.13.25860, 6.3.10.25910 13.05.2025 SB2025051313
#VU109007 - NULL Pointer Dereference
CVE-2025-30668		 CWE-476 Low
No
No
 6.1.17.25840, 6.2.13.25860, 6.3.10.25910 13.05.2025 SB2025051313
#VU109005 - NULL Pointer Dereference
CVE-2025-30666		 CWE-476 Low
No
No
 6.1.17.25840, 6.2.13.25860, 6.3.10.25910 13.05.2025 SB2025051313
#VU109004 - NULL Pointer Dereference
CVE-2025-30665		 CWE-476 Low
No
No
 6.1.17.25840, 6.2.13.25860, 6.3.10.25910 13.05.2025 SB2025051313
#VU109003 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-30664		 CWE-78 Low
No
No
 6.3.10.25910 13.05.2025 SB2025051313
#VU109001 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-30663		 CWE-362 Low
No
No
 6.1.16.25750, 6.2.12.25780, 6.3.10.25910 13.05.2025 SB2025051313
#VU107152 - NULL Pointer Dereference
CVE-2025-30671		 CWE-476 Low
No
No
 6.1.16.25750, 6.2.12.25780 08.04.2025 SB2025040840
#VU107153 - NULL Pointer Dereference
CVE-2025-30672		 CWE-476 Low
No
No
 6.1.16.25750, 6.2.12.25780 08.04.2025 SB2025040840
#VU107151 - NULL Pointer Dereference
CVE-2025-30670		 CWE-476 Low
No
No
 6.1.16.25750, 6.2.12.25780 08.04.2025 SB2025040840
#VU107149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27442		 CWE-79 Medium
No
No
 6.1.16.25750, 6.2.12.25780 08.04.2025 SB2025040838
#VU107148 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27441		 CWE-79 Medium
No
No
 6.1.16.25750, 6.2.12.25780 08.04.2025 SB2025040838
#VU105776 - Insufficient Verification of Data Authenticity
CVE-2025-0149		 CWE-345 Low
No
No
 6.1.15.25650, 6.2.10.25600 17.03.2025 SB2025031735
#VU105774 - Use After Free
CVE-2025-0151		 CWE-416 High
No
No
 6.1.16.25750, 6.2.12.25780 17.03.2025 SB2025031733
#VU105773 - Buffer Underwrite ('Buffer Underflow')
CVE-2025-27439		 CWE-124 High
No
No
 6.1.16.25750, 6.2.12.25780 17.03.2025 SB2025031732
#VU105772 - Heap-based Buffer Overflow
CVE-2025-27440		 CWE-122 High
No
No
 6.1.16.25750, 6.2.12.25780 17.03.2025 SB2025031730
#VU105767 - Out-of-bounds write
CVE-2025-0144		 CWE-787 Low
No
No
 6.0.15.25480, 6.1.13.25490 17.03.2025 SB2025031724
#VU105766 - Untrusted Search Path
CVE-2025-0145		 CWE-426 Low
No
No
 6.0.15.25480, 6.1.13.25490 17.03.2025 SB2025031723
#VU105763 - Improper input validation
CVE-2024-45419		 CWE-20 High
No
No
 6.0.14.25360, 6.1.12.25370 17.03.2025 SB2025031720


Showing elements 21 - 40 out of 74