Escalation of Privilege Vulnerability in Zoom Workplace Apps
CVE-2025-0151

8.5HIGH

Key Information:

Vendor
Zoom Communications, Inc
Status
Zoom Workplace Apps
Vendor
CVE Published:
11 March 2025

Summary

A vulnerability identified in Zoom's Workplace Apps allows authenticated users to perform privilege escalation through network access. This 'use after free' flaw can potentially expose sensitive data and system controls, emphasizing the need for timely updates and security monitoring. Organizations using Zoom should prioritize patching to safeguard against unauthorized access.

Affected Version(s)

Zoom Workplace Apps iOS See references.

References

https://www.zoom.com/en/trust/security-bulletin/zsb-25010/

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-0151 : Escalation of Privilege Vulnerability in Zoom Workplace Apps | SecurityVulnerability.io