CWE-689

Permission Race Condition During Resource Copy

2 CVEs Avg CVSS 6.4 MITRE

CRITICAL

HIGH

MEDIUM

LOW

POC

KEV

Monthly

CVE-2025-0087 Sep 04, 18:15 MEDIUM This Month

In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. Rated medium severity (CVSS 5.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Google Android

NVD

CVSS 3.1

5.1

EPSS

0.0%

CVE-2022-28768 Nov 17, 23:15 HIGH This Week

The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local privilege escalation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Apple Zoom Meetings

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2025-0087

EPSS 0% CVSS 5.1

MEDIUM This Month

Privilege Escalation Google Android

NVD

CVE-2022-28768

EPSS 0% CVSS 7.8

HIGH This Week

Privilege Escalation Apple Zoom +1

NVD