PT-2025-32954 · Zoom Video Communications · Zoom Clients For Windows

Published

2025-08-12

·

Updated

2025-09-08

·

CVE-2025-49457

CVSS v3.1
9.6
VectorAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 6.3.10
Description: An untrusted search path vulnerability exists in certain Zoom Clients for Windows. This flaw may allow an unauthenticated user to escalate privileges via network access.
Recommendations: Update Zoom to version 6.3.10 or later.

Fix

LPE

RCE

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2025-49457

Affected Products

Zoom Clients For Windows