by Kastro
Paper/Archive/CVE-2025-49457

CVE-2025-49457

Zoom Communications Inc Zoom Clients for Windows — Zoom Clients for Windows - Untrusted Search Path

EPSS 0.6%CVSS 9.6
critical.is priorityof 100
39
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 49.9.499 × 2010.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access

Affected

ProductAffectedFixed inSource
Zoom Clients for Windowssee references–CNA

Scores by source

Zoom (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refzoom.com/en/trust/security-bulletin/zsb-25030