NetSight
critical9.6

CVE-2025-49457

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access

Impact

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access

Affected products

VendorProductAffected versions
ZoomMeeting Software Development Kit
before 6.3.10
ZoomRooms
before 6.3.10
ZoomRooms Controller
before 6.3.10
ZoomWorkplace Desktop
before 6.3.10
ZoomWorkplace Virtual Desktop Infrastructure
before 6.1.16
from 6.2.10 before 6.2.12

Weakness classification

References