CVE-2025-0145: Zoom Workplace Apps for Windows - Untrusted Search Path
Published Jan 30, 2025
·Updated
Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.
Affected Software
8 affected components
Zoom Workplace Apps for Windows
Zoom Meeting Software Development Kit Windows<6.2.5
Zoom Rooms Windows<6.2.5
Zoom Rooms Controller Windows<6.2.5
Zoom Video Software Development Kit Windows<6.2.5
Zoom Workplace Desktop Windows<6.2.5
Zoom Workplace Virtual Desktop Infrastructure Windows<6.0.15
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.0.16<6.1.13
Event History
Jan 30, 2025
CVE Published
via MITRE·07:45 PM
Data Sourced
via MITRE·07:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-0145?
CVE-2025-0145 is classified as a medium severity vulnerability.
2
How do I fix CVE-2025-0145?
To fix CVE-2025-0145, users should update their Zoom Workplace Apps for Windows to the latest version released by Zoom.
3
Who is affected by CVE-2025-0145?
CVE-2025-0145 affects users of the Zoom Workplace Apps for Windows.
4
What type of vulnerability is CVE-2025-0145?
CVE-2025-0145 is an escalation of privilege vulnerability caused by an untrusted search path.
5
Can CVE-2025-0145 be exploited remotely?
CVE-2025-0145 requires local access, so it cannot be exploited remotely.