High-Severity Vulnerabilities Patched by Ivanti and Zoom

Enterprise software providers Ivanti and Zoom have issued patches for multiple vulnerabilities in their products, including high‑severity flaws that could allow arbitrary file writes, privilege escalation, code execution, and information disclosure.

According to Ivanti, three bugs in Ivanti Endpoint Manager (EMP) could be exploited by unauthenticated attackers for remote code execution or by local attackers for privilege escalation, tracked as CVE‑2025‑9713, CVE‑2025‑11622, and CVE‑2025‑10918; Ivanti says all EMP versions before 2024 SU4 are affected.

On the Zoom side, nine advisories were published detailing three high‑severity flaws, tracked as CVE‑2025‑62484, CVE‑2025‑64741, and CVE‑2025‑64740, which could lead to privilege escalation and affect iOS, Android, and Windows Zoom components. Five newly resolved medium‑severity issues could lead to information disclosure across Zoom’s desktop applications for Linux, macOS and Windows, with a sixth XSS defect in Zoom Workplace and Meeting SDK for Windows exploitable without authentication. Zoom states these flaws were resolved but makes no indication that any were exploited in the wild. The disclosures appeared on 12 November 2025.