Privilege Escalation Vulnerability in Zoom Workplace for Windows on ARM
CVE-2025-49459

7.8HIGH

Key Information:

Vendor

Zoom Communications, Inc

Status
Zoom Workplace For Windows On Arm
Vendor
CVE Published:
9 September 2025

What is CVE-2025-49459?

A significant privilege escalation vulnerability exists in Zoom Workplace for Windows on ARM prior to version 6.5.0. This flaw arises from inadequate authorization checks in the installer, allowing an authenticated user to exploit local access for unauthorized privilege elevation. As a result, users on vulnerable versions may be exposed to security risks, emphasizing the importance of updating to the latest version to mitigate these vulnerabilities.

Affected Version(s)

Zoom Workplace for Windows on ARM Windows 0 < 6.6.0

References

https://www.zoom.com/en/trust/security-bulletin/ZSB-25032

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-49459 : Privilege Escalation Vulnerability in Zoom Workplace for Windows on ARM