CVE-2025-49456

MEDIUM

6.2

Description

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access.

CVE Details

CVSS v3.1 Score6.2

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published8/12/2025

Last Modified9/8/2025

Sourcenvd

Honeypot Sightings0

Affected Products

zoom:meeting_software_development_kitzoom:roomszoom:rooms_controllerzoom:workplace_desktopzoom:workplace_virtual_desktop_infrastructure

Weaknesses (CWE)

CWE-426CWE-362

References

https://www.zoom.com/en/trust/security-bulletin/zsb-25029(security@zoom.us)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.