[Stanley]

Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE

Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution. 
The vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score: 9.6), relates to a case of an untrusted search path that could pave the way for privilege escalation.
"Untrusted search path in

https://thehackernews.com/2025/08/zoom-a...tical.html

[JoseMar]

A 9.6 for Zoom, wow. It feels like I'm updating that app constantly. To be fair, a privilege escalation bug is no joke. I guess that’s just life now. Always patching something.

[sharn]

Users who delay patches leave themselves exposed.
Hackers are fast to exploit flaws.

[plops]

Its an endless search for priv escalation. Remeber to update your apps

[Yanix]

It’s reassuring when companies disclose and patch at the same time. Transparency builds trust.

[The Pact]

This flaw was apparently discovered by Zoom’s own Offensive Security team.
I actually work on Zoom so I hope they patched it properly.