Zoom Security Updates – 15 January 2025

obtain sensitive information, or perform denial-of-service attacks on the affected systems.

Sample of the addressed Vulnerabilities:

1. Zoom Apps Privilege Escalation Vulnerability (CVE-2025-0147):

• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Privileges

2. Zoom Jenkins Bot Plugin Obtain Information Vulnerability (CVE-2025-0142):

• CVSS: 4.3
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Obtain Information

The affected products:

• Zoom Workplace App.
• Zoom Workplace VDI.
• Zoom Meeting SDK.
• Zoom Video SDK.
• Zoom Rooms Client.
• Zoom Rooms Controller.
• Zoom Jenkins bot plugin.