Critical severity9.6NVD Advisory· Published Aug 12, 2025· Updated Jun 17, 2026

CVE-2025-49457

Description

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access

LLM-synthesized narrative grounded in this CVE's description and references.

Zoom Video Communications, Inc./Meeting Software Development Kit
cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*
Range: <6.3.10
Zoom Video Communications, Inc./Rooms
cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
Range: <6.3.10
Zoom Video Communications, Inc./Rooms Controller
cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*
Range: <6.3.10
Zoom Video Communications, Inc./Workplace Desktop
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*
Range: <6.3.10
Zoom Video Communications, Inc./Workplace Virtual Desktop Infrastructure
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
Range: <6.1.16
Zoom Video Communications, Inc./Zoom Client for Windowsllm-create
Zoom Video Communications, Inc./Zoom Desktop Client for Windowsv5
Range: see references