CVE-2025-0145

· MEDIUMAnalyzed

← All CVEs

CVSS v3.1

4.6

EPSS

0.21%

Published

Jan 30, 2025

Modified

Aug 20, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L

Weaknesses (CWE)

CWE-426

Affected Products (7)

zoom · meeting_software_development_kit (up to 6.2.5)vulnerable

zoom · rooms (up to 6.2.5)vulnerable

zoom · rooms_controller (up to 6.2.5)vulnerable

zoom · video_software_development_kit (up to 6.2.5)vulnerable

zoom · workplace_desktop (up to 6.2.5)vulnerable

zoom · workplace_virtual_desktop_infrastructure (up to 6.0.15)vulnerable

· workplace_virtual_desktop_infrastructure

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-25004/

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs