First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-46789

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Zoom Communications Inc.	Zoom Clients for Windows	< see references

References

https://https://www.zoom.com/en/trust/security-bulletin/zsb-25024/Broken Link, Vendor Advisory

Timeline

Published: Jul 10, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-46796.5A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspec CVE-2025-46808.6Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Exploiting Incorrectly Configured Acc CVE-2025-468019.3Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerabil CVE-2025-468026.0For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.CVE-2025-468035.0The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Scree CVE-2025-468043.3A minor information leak when running Screen with setuid-root privileges allows unprivileged users to deduce information about a path that w CVE-2025-468055.5Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes w CVE-2025-468066.9A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2 CVE-2025-468078.7A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh CVE-2025-468086.8An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager c CVE-2025-468095.7A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Cont CVE-2025-46818.6Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Abuse.This issue affect

CVE-2025-46789: Medium severity, CVSS 6.5 | Vulnix