CVE-2025-0145
MEDIUMDescription
Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.
Is your site exposed to CVE-2025-0145?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| zoom | meeting_software_development_kit |
| zoom | rooms |
| zoom | rooms_controller |
| zoom | video_software_development_kit |
| zoom | workplace_desktop |
| zoom | workplace_virtual_desktop_infrastructure |
| zoom | workplace_virtual_desktop_infrastructure |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-0145? +
How severe is CVE-2025-0145? +
What products are affected by CVE-2025-0145? +
How do I check if I'm vulnerable to CVE-2025-0145? +
Related Vulnerabilities
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user …
Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. When a local administrator …
Rufus is a utility that helps format and create bootable USB flash drives. A DLL hijacking vulnerability in Rufus 4.6.2208 …
There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file …
Broadcom Automic Automation Agent Unix versions < 24.3.0 HF4 and < 21.0.13 HF1 allow low privileged users who have execution …
In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious …