CVE-2025-49457

The error consists in the application searching for DLL libraries or other executable resources in untrusted paths, which enables substitution of a malicious executable file. An attacker with network access can trick a user into performing an action (UI: Required), which will cause the application to load a malicious file from a compromised or controlled path. Due to scope change (Scope: Changed), the effects may extend beyond the Zoom process itself and impact the broader system context.

A successful attack may allow the attacker to obtain elevated privileges in the Windows operating system, as well as compromise confidentiality, integrity and availability of data — all three CIA components were assessed as HIGH.

Security patches available from the vendor should be applied in accordance with references published in the Zoom security bulletin at https://www.zoom.com/en/trust/security-bulletin/zsb-25030. Immediate update of all mentioned Zoom components in Windows environments is recommended.

Zoom Meeting Software Development Kit (Windows), Zoom Rooms (Windows), Zoom Workplace Desktop (Windows), Zoom Workplace Virtual Desktop Infrastructure (Windows), Zoom Rooms Controller (Windows) — specific versions indicated in vendor references (zsb-25030).