CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2025-49457
High (8.8) in zoom. EPSS 0.6% chance of exploitation in the next 30 days.
Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-11-01)
- CWE
- CWE-426
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zoom:meeting_software_development_kit
- zoom:rooms
- zoom:rooms_controller
- zoom:workplace_desktop
- zoom:workplace_virtual_desktop_infrastructure