Medium severity6.5NVD Advisory· Published Jul 10, 2025· Updated Jun 17, 2026

CVE-2025-49463

Description

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access.

Affected products

Zoom Video Communications, Inc./Zoom
cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*
Range: <6.4.5
Zoom Video Communications, Inc./Zoom Client for iOSllm-create
Range: <6.4.5
Zoom Video Communications, Inc./Zoom Desktop Client for Windowscpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

https//www.zoom.com/en/trust/security-bulletin/zsb-25026/nvdBroken LinkVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000