Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws

Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution. The vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 CVSS score: 9.6, relates to a case of an untrusted...

Vulnerabilities fixed in Zoom

Zoom has fixed vulnerabilities in Zoom Clients for Windows. The first vulnerability concerns an untrusted search path issue, which could allow unauthenticated remote users to elevate their privileges via network access. The second vulnerability concerns a race condition in the installer, which ca...

CVE-2025-49456

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access...

CVE-2025-49456

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access...

CVE-2025-49457

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2025-49457 Zoom Clients for Windows - Untrusted Search Path

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2025-49457 Zoom Clients for Windows - Untrusted Search Path

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2025-49457

CVE-2025-49457 affects Zoom Clients for Windows (multiple Zoom products: Zoom Workplace for Windows, Zoom Rooms for Windows, Zoom Rooms Controller, Zoom Meeting SDK for Windows) where an untrusted search path could allow an unauthenticated attacker to escalate privileges over the network. Affecte...

CVE-2025-49456

CVE-2025-49456 concerns a race condition in the installer of Zoom Clients for Windows. The connected sources consistently describe that the vulnerability stems from a faulty installer process, allowing an unauthenticated local user to impact (compromise) application integrity. The affected softwa...

CVE-2025-49456 Zoom Clients for Windows- Race Condition

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access...

CVE-2025-49456 Zoom Clients for Windows- Race Condition

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access...

Zoom Workplace < 6.4.10 Vulnerability (ZSB-25029)

The version of Zoom Workplace installed on the remote host is prior to 6.4.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25029 advisory. - Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application...

Zoom Workplace < 6.3.10 Vulnerability (ZSB-25030)

The version of Zoom Workplace installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25030 advisory. - Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege...

Zoom Clients for Windows 安全漏洞

Zoom Clients for Windows is a video conferencing software from Zoom USA. A security vulnerability exists in Zoom Clients for Windows that originates from a competing condition in the installer that could affect application integrity...

PT-2025-32947

Name of the Vulnerable Software and Affected Versions: Zoom Clients for Windows affected versions not specified Description: A race condition exists in the installer for certain Zoom Clients for Windows. This may allow a local, unauthenticated user to compromise application integrity...

Zoom Workplace VDI < 6.3.12 Vulnerability (ZSB-25029)

The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.12. It is, therefore, affected by a vulnerability as referenced in the ZSB-25029 advisory. - Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application...

PT-2025-32954

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 6.3.10 Description: An untrusted search path vulnerability exists in certain Zoom Clients for Windows. This flaw may allow an unauthenticated user to escalate privileges via network access. Recommendations: Update Zoom ...

Zoom Clients for Windows 安全漏洞

Zoom Clients for Windows is a video conferencing software from Zoom, Inc. A security vulnerability exists in Zoom Clients for Windows that originates from an untrusted search path and could result in elevated privileges...

Zoom Workplace VDI < 6.3.10 Vulnerability (ZSB-25030)

The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25030 advisory. - Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of...

Zoom Workplace for Linux Improper Certificate Validation Vulnerability

Zoom Workplace for Linux is a Linux application for enterprise communication and collaboration, offering features such as video conferencing, online meetings, chat and mobile collaboration. Zoom Workplace for Linux suffers from an improper certificate validation vulnerability that can be exploite...