Zoom and Xerox have tackled significant security vulnerabilities in Zoom Clients for Windows and FreeFlow Core that might enable privilege escalation and remote code execution.
The flaw affecting Zoom Clients for Windows, identified as CVE-2025-49457 (CVSS score: 9.6), pertains to a scenario involving an unverified search path that could facilitate privilege escalation.
“Unverified search path in