PT-2025-36982 · Zoom Video Communications · Zoom Workplace For Windows On Arm

Sim0Nsecurity · CVE-2025-49459 · Published 2025-09-09 · Updated 2025-09-10

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Zoom Workplace for Windows on ARM versions prior to 6.5.0

Description: Missing authorization in the installer may allow an authenticated user to conduct an escalation of privilege via local access.

Recommendations: Update Zoom Workplace for Windows on ARM to version 6.5.0 or later.

Fix

LPE

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-49459

Affected Products

Zoom Workplace For Windows On Arm

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-49459 · Security Note
• https://twitter.com/CVEnew/status/1965557688487608523 · Twitter Post
• https://zoom.com/en/trust/security-bulletin/ZSB-25032 · Note
• https://twitter.com/VulmonFeeds/status/1965645772633874573 · Twitter Post