CVE-2025-0145CWE-426

Zoom Workplace Apps for Windows - Untrusted Search Path

Medium · published January 30, 2025

CVSS v3.1
4.6
EPSS
0%
Percentile
10.7
In the wild
Unconfirmed
What it is

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.7th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2025-01-30T19:45Z
EPSS history
Timeline
  • 30 JAN 19:45Z
    Zoom Workplace Apps for Windows - Untrusted Search Path
    cvelistv5