CVE-2025-0150

Published: Mar 11, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access.

Affected (2)

Products: Zoom: Meeting Software Development Kit, Workplace

Zoom

2 products

Meeting Software Development Kit

Workplace

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Software Development Kit	Before 6.3.0
Zoom Workplace	Before 6.3.0

Related CWEs

CWE-696

Incorrect Behavior Order

The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways which may produce resultant weaknesses.

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-25009/

Source: security@zoom.us

Vendor Advisory

Timeline

No history available yet.