NetSight
medium4.6

CVE-2025-0145

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local ac…

Impact

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.

Affected products

VendorProductAffected versions
ZoomMeeting Software Development Kit
before 6.2.5
ZoomRooms
before 6.2.5
ZoomRooms Controller
before 6.2.5
ZoomVideo Software Development Kit
before 6.2.5
ZoomWorkplace Desktop
before 6.2.5
ZoomWorkplace Virtual Desktop Infrastructure
before 6.0.15
from 6.0.16 before 6.1.13

Weakness classification

References