CVE-2025-49459

—

CVSS 3.1

7.8 high

EPSS

<1%p4

Published

Sep 9, 2025 (Sep 9, 2025)

Modified

Jun 17, 2026

Description

Missing authorization in the installer for Zoom Workplace for Windows on ARM before version 6.5.0 may allow an authenticated user to conduct an escalation of privilege via local access.

Weakness: CWE-862
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.