CVE-2025-0145: falha de média gravidade em Zoom Workplace Apps for Windows
Zoom Workplace Apps for Windows - Untrusted Search Path
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.6epss 0.2%
Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L
Produtos afetados
Zoom Communications, Inc · Zoom Workplace Apps for WindowsCVEs relacionadas — Zoom Workplace Apps for Windows
No mesmo produto, das mais perigosas para as menos.
CVE-2025-30666MEDIUMZoom Workplace Apps for Windows - NULL Pointer DereferenceEPSS 0.6%CVE-2025-30665MEDIUMZoom Workplace Apps for Windows - NULL Pointer DereferenceEPSS 0.6%CVE-2025-30670MEDIUMZoom Workplace Apps for Windows - Null PointerEPSS 0.4%CVE-2025-30671MEDIUMZoom Workplace Apps for Windows - Null PointerEPSS 0.4%CVE-2025-27443LOWZoom Workplace Apps for Windows - Insecure Default Variable InitializationEPSS 0.2%