7.8
/ 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Missing authorization in the installer for Zoom Workplace for Windows on ARM before version 6.5.0 may allow an authenticated user to conduct an escalation of privilege via local access.
Basic Information
ID
CVE-2025-49459
Source
Zoom
Published
Sep 9, 2025 at 21:29
Affected Product
Vendor
Zoom Communications, Inc
Product
Zoom Workplace for Windows on ARM
Affected Versions
Zoom Communications, Inc Zoom Workplace for Windows on ARM 0