CVE-2025-49456

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*

History

08 Sep 2025, 15:33

Type Values Removed Values Added
CWE CWE-362
First Time Zoom meeting Software Development Kit
Zoom rooms Controller
Zoom rooms
Zoom workplace Desktop
Zoom workplace Virtual Desktop Infrastructure
Zoom
CPE cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
References () https://www.zoom.com/en/trust/security-bulletin/zsb-25029 - () https://www.zoom.com/en/trust/security-bulletin/zsb-25029 - Vendor Advisory

13 Aug 2025, 17:33

Type Values Removed Values Added
Summary
  • (es) La condición de ejecución en el instalador de ciertos clientes Zoom para Windows puede permitir que un usuario no autenticado afecte la integridad de la aplicación a través del acceso local.

12 Aug 2025, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-08-12 23:15

Updated : 2025-09-08 15:33


NVD link : CVE-2025-49456

Mitre link : CVE-2025-49456

CVE.ORG link : CVE-2025-49456


JSON object : View

Products Affected

zoom

  • workplace_desktop
  • rooms_controller
  • meeting_software_development_kit
  • rooms
  • workplace_virtual_desktop_infrastructure
CWE
CWE-426

Untrusted Search Path

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')