{"metadata": {"vulnerability": "CVE-2025-49457", "count": 55, "kinds": {"milestone": 6, "sighting": 31, "kev": 0, "other": 18}}, "data": [{"timestamp": "2025-06-04T22:48:18.920Z", "date_only": false, "value": "2025-06-04T22:48:18.920Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-49457", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0254", "record": "NCSC-2025-0254", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-08-12T12:01:00Z", "date_only": false, "value": "2025-08-12T12:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Zoom", "record": "CVE-2025-49457", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-08-12T15:28:49.100Z", "date_only": false, "value": "2025-08-12T15:28:49.100388Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lw7mt7fbrk2a", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "fed7c687-cdc2-4d1f-adea-826329e90ece", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lw7mt7fbrk2a"}, {"timestamp": "2025-08-12T22:00:00Z", "date_only": false, "value": "2025-08-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1777", "record": "WID-SEC-W-2025-1777", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-08-12T22:00:00Z", "date_only": false, "value": "2025-08-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1777", "record": "WID-SEC-W-2025-1777", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-08-12T22:00:00Z", "date_only": false, "value": "2025-08-12T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1777", "record": "WID-SEC-W-2025-1777", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-08-12T22:00:00Z", "date_only": false, "value": "2025-08-12T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1777", "record": "WID-SEC-W-2025-1777", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-08-12T22:54:20.362Z", "date_only": false, "value": "2025-08-12T22:54:20.362Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-49457", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-08-12T22:54:20.362Z", "date_only": false, "value": "2025-08-12T22:54:20.362Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zoom", "record": "CVE-2025-49457", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-12T23:15:28Z", "date_only": false, "value": "2025-08-12T23:15:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P38F-88H2-WJ88", "record": "GHSA-P38F-88H2-WJ88", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-08-12T23:15:28.243Z", "date_only": false, "value": "2025-08-12T23:15:28.243", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49457", "record": "FKIE_CVE-2025-49457", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-08-13T00:30:56Z", "date_only": false, "value": "2025-08-13T00:30:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P38F-88H2-WJ88", "record": "GHSA-P38F-88H2-WJ88", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-08-13T00:30:56Z", "date_only": false, "value": "2025-08-13T00:30:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P38F-88H2-WJ88", "record": "GHSA-P38F-88H2-WJ88", "field": "modified", "linked_record": true}, {"timestamp": "2025-08-13T01:31:39.442Z", "date_only": false, "value": "2025-08-13T01:31:39.442126Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lwaoj4tieg24", "record": "cve-2025-49457", "field": "creation_timestamp", "uuid": "1140c1d8-5b12-414a-8654-4b904ad161b8", "url": "https://bsky.app/profile/offseq.bsky.social/post/3lwaoj4tieg24"}, {"timestamp": "2025-08-13T06:04:18.575Z", "date_only": false, "value": "2025-08-13T06:04:18.575267Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwb5qozwkw2f", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "4f80db6f-264a-4c00-abe0-aeae481ba40a", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwb5qozwkw2f"}, {"timestamp": "2025-08-13T08:57:46.273Z", "date_only": false, "value": "2025-08-13T08:57:46.273+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1777", "record": "WID-SEC-W-2025-1777", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-08-13T09:09:21.491Z", "date_only": false, "value": "2025-08-13T09:09:21.491424Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0254", "record": "NCSC-2025-0254", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-08-13T09:09:21.491Z", "date_only": false, "value": "2025-08-13T09:09:21.491424Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0254", "record": "NCSC-2025-0254", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-08-13T09:09:21.491Z", "date_only": false, "value": "2025-08-13T09:09:21.491424Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0254", "record": "NCSC-2025-0254", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-08-13T11:19:00Z", "date_only": false, "value": "2025-08-13T11:19:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "4f10e231-4167-4604-8c91-f6b05fdc9d75", "url": "https://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html"}, {"timestamp": "2025-08-13T19:09:25.515Z", "date_only": false, "value": "2025-08-13T19:09:25.515172Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115023030820091886", "record": "cve-2025-49457", "field": "creation_timestamp", "uuid": "8c12a0c6-ce7b-4f70-9302-8f71aeb5a298", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115023030820091886"}, {"timestamp": "2025-08-13T19:09:30.658Z", "date_only": false, "value": "2025-08-13T19:09:30.658780Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/darkwebinformer.com/post/3lwcjmr5qes2e", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "86310f01-95eb-4736-a633-9436dd693094", "url": "https://bsky.app/profile/darkwebinformer.com/post/3lwcjmr5qes2e"}, {"timestamp": "2025-08-13T19:10:20Z", "date_only": false, "value": "2025-08-13T19:10:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_News/7374", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "f9ac72d3-8063-4915-b84d-d52dc668e3c8", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2025-49457: Zoom Clients for Windows: Untrusted Search Path Vulnerability\nLink: https://darkwebinformer.com/cve-2025-49457-zoom-clients-for-windows-untrusted-search-path-vulnerability/", "url": "https://t.me/DarkWebInformer_News/7374"}, {"timestamp": "2025-08-13T21:10:12Z", "date_only": false, "value": "2025-08-13T21:10:12.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/KG2TpkTqLkrKcco6tldEMvACucw_WlYwXkvKrU8wVoi4yw", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "f037c3da-3228-4c15-a9cb-99d5583e8e24"}, {"timestamp": "2025-08-13T21:34:39.056Z", "date_only": false, "value": "2025-08-13T21:34:39.056535Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwcrqas3a22j", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "5b76b4a8-816b-40d4-8faf-ad9596e16019", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwcrqas3a22j"}, {"timestamp": "2025-08-14T03:56:14.834Z", "date_only": false, "value": "2025-08-14T03:56:14.834393Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-49457", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-08-14T03:56:14.834Z", "date_only": false, "value": "2025-08-14T03:56:14.834393Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49457", "record": "FKIE_CVE-2025-49457", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-08-14T09:30:39.431Z", "date_only": false, "value": "2025-08-14T09:30:39.431696Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lwdzqledlj24", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "e60acbbd-c3d7-43c7-9989-604a94dc8f09", "url": "https://bsky.app/profile/nimblenerd.social/post/3lwdzqledlj24"}, {"timestamp": "2025-08-14T10:30:18Z", "date_only": false, "value": "2025-08-14T10:30:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/08/14/zoom-patches-critical-windows-flaw.html", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "79f2ee91-3335-4570-a7b8-f6a3c23d69b2", "url": "https://threatintel.cc/2025/08/14/zoom-patches-critical-windows-flaw.html"}, {"timestamp": "2025-08-14T11:25:35.187Z", "date_only": false, "value": "2025-08-14T11:25:35.187782Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115026869267002974", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "576327e2-ef34-4092-bead-d2ad4bd15a4f", "url": "https://infosec.exchange/users/jbhall56/statuses/115026869267002974"}, {"timestamp": "2025-08-14T11:25:44.071Z", "date_only": false, "value": "2025-08-14T11:25:44.071038Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lwea6dmwis26", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "6a90d8b5-a152-413c-bacc-e578063d386f", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3lwea6dmwis26"}, {"timestamp": "2025-08-14T12:30:12.753Z", "date_only": false, "value": "2025-08-14T12:30:12.753674Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115027123394975363", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "de9b47a6-184d-49e2-8010-16cca5381177", "url": "https://infosec.exchange/users/edwardk/statuses/115027123394975363"}, {"timestamp": "2025-08-14T12:33:16.303Z", "date_only": false, "value": "2025-08-14T12:33:16.303347Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwedwppbvme2", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "b4012972-27e6-4e6a-a1e4-ad758cd6a8e2", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwedwppbvme2"}, {"timestamp": "2025-08-14T15:20:09.150Z", "date_only": false, "value": "2025-08-14T15:20:09.150365Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lwenbj6txa2q", "record": "cve-2025-49457", "field": "creation_timestamp", "uuid": "d96539d8-c1ec-4675-ae35-06ccce4714ed", "url": "https://bsky.app/profile/cyberhub.blog/post/3lwenbj6txa2q"}, {"timestamp": "2025-08-14T16:56:07.205Z", "date_only": false, "value": "2025-08-14T16:56:07.205080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwesn4jp5g2r", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "9c86d594-6749-4278-95bb-aff31f387c6b", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwesn4jp5g2r"}, {"timestamp": "2025-08-14T17:33:10.057Z", "date_only": false, "value": "2025-08-14T17:33:10.057513Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dtpnews.bsky.social/post/3lweupeourk2j", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "db586024-c24b-4945-b575-55a44aa7f4e8", "url": "https://bsky.app/profile/dtpnews.bsky.social/post/3lweupeourk2j"}, {"timestamp": "2025-08-14T17:33:16.094Z", "date_only": false, "value": "2025-08-14T17:33:16.094973Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/oknews.bsky.social/post/3lweupku6ao2l", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "fcbef515-44d1-4185-af48-dfdf64afad21", "url": "https://bsky.app/profile/oknews.bsky.social/post/3lweupku6ao2l"}, {"timestamp": "2025-08-15T05:35:46.704Z", "date_only": false, "value": "2025-08-15T05:35:46.704794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwg53jglws2d", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "f7a2d85a-9532-4061-aa0c-e94e3cfb6c17", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwg53jglws2d"}, {"timestamp": "2025-08-15T21:00:31.708Z", "date_only": false, "value": "2025-08-15T21:00:31.708885Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwhqqhloqmz2", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "8ce551a6-b859-4549-b25c-64ac468bb5bb", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwhqqhloqmz2"}, {"timestamp": "2025-08-16T22:13:54.430Z", "date_only": false, "value": "2025-08-16T22:13:54.430211Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwkfd4xwls2d", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "75b3c4cc-ab6c-4f93-9d96-79ad74b2a7e1", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwkfd4xwls2d"}, {"timestamp": "2025-08-18T20:09:25.777Z", "date_only": false, "value": "2025-08-18T20:09:25.777411Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwp7cghf3c25", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "428d3f42-08ff-492e-ab6b-bde21fa68835", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwp7cghf3c25"}, {"timestamp": "2025-08-20T11:13:15Z", "date_only": false, "value": "2025-08-20T11:13:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/15218", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "37578623-1532-405b-bb07-07035ce88817", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.\n\nThe vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score: 9.6), relates to a case of an untrusted search path that could pave the way for privilege escalation.\n\nOther vulnerabilities:\n\nCVE-2025-8355 (CVSS score: 7.5) - XML External Entity (XXE) injection vulnerability leading to server-side request forgery (SSRF)\n\nCVE-2025-8356 (CVSS score: 9.8) - Path traversal vulnerability leading to remote code execution\n\nhttps://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf\n\nhttps://www.zoom.com/en/trust/security-bulletin/zsb-25030/\n\nhttps://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "url": "https://t.me/cKure/15218", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": true, "value": "2025-08-21", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-33439", "record": "CNVD-2026-33439", "field": "submitTime", "linked_record": true}, {"timestamp": "2025-09-10T20:46:10.140Z", "date_only": false, "value": "2025-09-10T20:46:10.140476Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyj43aaqrs2g", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "77d775a0-39c7-41d8-ac01-c25033ca4dde", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyj43aaqrs2g"}, {"timestamp": "2026-02-26T17:48:42.934Z", "date_only": false, "value": "2026-02-26T17:48:42.934Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-49457", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T17:48:42.934Z", "date_only": false, "value": "2026-02-26T17:48:42.934Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-49457", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:31:20.540Z", "date_only": false, "value": "2026-06-17T09:31:20.540", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49457", "record": "FKIE_CVE-2025-49457", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-20T20:00:04.630Z", "date_only": false, "value": "2026-07-20T20:00:04.630991Z", "kind": "sighting", "label": "Seen", "source": "Telegram/e8Gfpk_ScLgRYm5TLKfxZ4PuCVECC1brGgRA0F6XawO4MHc", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "553dd446-102e-4c6e-bf3b-b3969ec4f84c"}, {"timestamp": "2026-07-21T00:00:19.854Z", "date_only": false, "value": "2026-07-21T00:00:19.854056Z", "kind": "sighting", "label": "Seen", "source": "Telegram/e8Gfpk_ScLgRYm5TLKfxZ4PuCVECC1brGgRA0F6XawO4MHc", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "10fbf154-afd3-4d9c-a137-5922e70f65ef"}, {"timestamp": "2026-07-29T12:01:56.869Z", "date_only": false, "value": "2026-07-29T12:01:56.869226Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "fa75b46d-2dc9-41d1-a682-39825a957d7a", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-07-30T00:02:07.661Z", "date_only": false, "value": "2026-07-30T00:02:07.661766Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "72813889-0854-407e-b871-ac91e1986965", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-08-01T19:00:03.627Z", "date_only": false, "value": "2026-08-01T19:00:03.627066Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "18675a63-cf65-4346-a69e-61093ea81121", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-08-02T00:00:22.786Z", "date_only": false, "value": "2026-08-02T00:00:22.786431Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "a248ff35-49c9-49bb-a04d-1ed5a8fc0acc", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": true, "value": "2026-08-24", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-33439", "record": "CNVD-2026-33439", "field": "openTime", "linked_record": true}], "metrics": {"as_of": "2026-11-09T20:52:58.338Z", "anchors": {"origin": {"timestamp": "2025-08-12T12:01:00Z", "date_only": false, "value": "2025-08-12T12:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Zoom", "record": "CVE-2025-49457", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-08-12T12:01:00Z", "date_only": false, "value": "2025-08-12T12:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Zoom", "record": "CVE-2025-49457", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-08-20T11:13:15Z", "date_only": false, "value": "2025-08-20T11:13:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/15218", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "37578623-1532-405b-bb07-07035ce88817", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.\n\nThe vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score: 9.6), relates to a case of an untrusted search path that could pave the way for privilege escalation.\n\nOther vulnerabilities:\n\nCVE-2025-8355 (CVSS score: 7.5) - XML External Entity (XXE) injection vulnerability leading to server-side request forgery (SSRF)\n\nCVE-2025-8356 (CVSS score: 9.8) - Path traversal vulnerability leading to remote code execution\n\nhttps://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf\n\nhttps://www.zoom.com/en/trust/security-bulletin/zsb-25030/\n\nhttps://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "url": "https://t.me/cKure/15218", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 688335.0, "hours": 191.20416666666668, "days": 7.966840277777778, "min_seconds": 688335.0, "max_seconds": 688335.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-08-12T12:01:00Z", "date_only": false, "value": "2025-08-12T12:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Zoom", "record": "CVE-2025-49457", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-08-20T11:13:15Z", "date_only": false, "value": "2025-08-20T11:13:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/15218", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "37578623-1532-405b-bb07-07035ce88817", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.\n\nThe vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score: 9.6), relates to a case of an untrusted search path that could pave the way for privilege escalation.\n\nOther vulnerabilities:\n\nCVE-2025-8355 (CVSS score: 7.5) - XML External Entity (XXE) injection vulnerability leading to server-side request forgery (SSRF)\n\nCVE-2025-8356 (CVSS score: 9.8) - Path traversal vulnerability leading to remote code execution\n\nhttps://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf\n\nhttps://www.zoom.com/en/trust/security-bulletin/zsb-25030/\n\nhttps://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "url": "https://t.me/cKure/15218", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 39257518.338553, "hours": 10904.86620515361, "days": 454.3694252147338, "min_seconds": 39257518.338553, "max_seconds": 39257518.338553, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-08-12T12:01:00Z", "date_only": false, "value": "2025-08-12T12:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Zoom", "record": "CVE-2025-49457", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T20:52:58.338Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 38569183.338553, "hours": 10713.662038486944, "days": 446.402584936956, "min_seconds": 38569183.338553, "max_seconds": 38569183.338553, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-08-20T11:13:15Z", "date_only": false, "value": "2025-08-20T11:13:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/15218", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "37578623-1532-405b-bb07-07035ce88817", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.\n\nThe vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score: 9.6), relates to a case of an untrusted search path that could pave the way for privilege escalation.\n\nOther vulnerabilities:\n\nCVE-2025-8355 (CVSS score: 7.5) - XML External Entity (XXE) injection vulnerability leading to server-side request forgery (SSRF)\n\nCVE-2025-8356 (CVSS score: 9.8) - Path traversal vulnerability leading to remote code execution\n\nhttps://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf\n\nhttps://www.zoom.com/en/trust/security-bulletin/zsb-25030/\n\nhttps://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "url": "https://t.me/cKure/15218", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T20:52:58.338Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}