CVE-2025-49459

Zoom Workplace for Windows on ARM - Missing Authorization PUBLISHED

Description (CNA)

Missing authorization in the installer for Zoom Workplace for Windows on ARM before version 6.5.0 may allow an authenticated user to conduct an escalation of privilege via local access.

Affected (CNA)

Vendor / product	Versions
Zoom Communications, Inc / Zoom Workplace for Windows on ARM	affected 0 before 6.6.0

CWE

CWE-862

References

https://www.zoom.com/en/trust/security-bulletin/ZSB-25032

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.