+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE (/showthread.php?tid=6306545)
Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE - Stanley - Aug 24, 2025
Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE
Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.
The vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score: 9.6), relates to a case of an untrusted search path that could pave the way for privilege escalation.
"Untrusted search path in
https://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html
RE: Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE - JoseMar - Sep 2, 2025
A 9.6 for Zoom, wow. It feels like I'm updating that app constantly. To be fair, a privilege escalation bug is no joke. I guess that’s just life now. Always patching something.
RE: Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE - sharn - Sep 14, 2025
Users who delay patches leave themselves exposed.
Hackers are fast to exploit flaws.
RE: Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE - plops - Sep 14, 2025
Its an endless search for priv escalation. Remeber to update your apps
RE: Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE - Yanix - Sep 15, 2025
It’s reassuring when companies disclose and patch at the same time. Transparency builds trust.
RE: Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE - The Pact - Sep 16, 2025
This flaw was apparently discovered by Zoom’s own Offensive Security team.
I actually work on Zoom so I hope they patched it properly.