{"metadata": {"vulnerability": "cve-2025-49457", "count": 55, "kinds": {"milestone": 6, "sighting": 31, "kev": 0, "other": 18}}, "data": [{"timestamp": "2025-06-04T22:48:18.920Z", "date_only": false, "value": "2025-06-04T22:48:18.920Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-49457", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0254", "record": "NCSC-2025-0254", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-12T12:01:00Z", "date_only": false, "value": "2025-08-12T12:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Zoom", "record": "cve-2025-49457", "field": "containers.cna.datePublic"}, {"timestamp": "2025-08-12T15:28:49.100Z", "date_only": false, "value": "2025-08-12T15:28:49.100388Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lw7mt7fbrk2a", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "fed7c687-cdc2-4d1f-adea-826329e90ece", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lw7mt7fbrk2a"}, {"timestamp": "2025-08-12T22:00:00Z", "date_only": false, "value": "2025-08-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1777", "record": "WID-SEC-W-2025-1777", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-08-12T22:00:00Z", "date_only": false, "value": "2025-08-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1777", "record": "WID-SEC-W-2025-1777", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-08-12T22:00:00Z", "date_only": false, "value": "2025-08-12T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1777", "record": "WID-SEC-W-2025-1777", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-08-12T22:00:00Z", "date_only": false, "value": "2025-08-12T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1777", "record": "WID-SEC-W-2025-1777", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-08-12T22:54:20.362Z", "date_only": false, "value": "2025-08-12T22:54:20.362Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-49457", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-08-12T22:54:20.362Z", "date_only": false, "value": "2025-08-12T22:54:20.362Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zoom", "record": "cve-2025-49457", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-12T23:15:28Z", "date_only": false, "value": "2025-08-12T23:15:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P38F-88H2-WJ88", "record": "GHSA-P38F-88H2-WJ88", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-08-12T23:15:28.243Z", "date_only": false, "value": "2025-08-12T23:15:28.243", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49457", "record": "FKIE_CVE-2025-49457", "field": "published"}, {"timestamp": "2025-08-13T00:30:56Z", "date_only": false, "value": "2025-08-13T00:30:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P38F-88H2-WJ88", "record": "GHSA-P38F-88H2-WJ88", "field": "published"}, {"timestamp": "2025-08-13T00:30:56Z", "date_only": false, "value": "2025-08-13T00:30:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P38F-88H2-WJ88", "record": "GHSA-P38F-88H2-WJ88", "field": "modified"}, {"timestamp": "2025-08-13T01:31:39.442Z", "date_only": false, "value": "2025-08-13T01:31:39.442126Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lwaoj4tieg24", "record": "cve-2025-49457", "field": "creation_timestamp", "uuid": "1140c1d8-5b12-414a-8654-4b904ad161b8", "url": "https://bsky.app/profile/offseq.bsky.social/post/3lwaoj4tieg24"}, {"timestamp": "2025-08-13T06:04:18.575Z", "date_only": false, "value": "2025-08-13T06:04:18.575267Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwb5qozwkw2f", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "4f80db6f-264a-4c00-abe0-aeae481ba40a", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwb5qozwkw2f"}, {"timestamp": "2025-08-13T08:57:46.273Z", "date_only": false, "value": "2025-08-13T08:57:46.273+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1777", "record": "WID-SEC-W-2025-1777", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-13T09:09:21.491Z", "date_only": false, "value": "2025-08-13T09:09:21.491424Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0254", "record": "NCSC-2025-0254", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-08-13T09:09:21.491Z", "date_only": false, "value": "2025-08-13T09:09:21.491424Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0254", "record": "NCSC-2025-0254", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-08-13T09:09:21.491Z", "date_only": false, "value": "2025-08-13T09:09:21.491424Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0254", "record": "NCSC-2025-0254", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-08-13T11:19:00Z", "date_only": false, "value": "2025-08-13T11:19:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "4f10e231-4167-4604-8c91-f6b05fdc9d75", "url": "https://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html"}, {"timestamp": "2025-08-13T19:09:25.515Z", "date_only": false, "value": "2025-08-13T19:09:25.515172Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115023030820091886", "record": "cve-2025-49457", "field": "creation_timestamp", "uuid": "8c12a0c6-ce7b-4f70-9302-8f71aeb5a298", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115023030820091886"}, {"timestamp": "2025-08-13T19:09:30.658Z", "date_only": false, "value": "2025-08-13T19:09:30.658780Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/darkwebinformer.com/post/3lwcjmr5qes2e", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "86310f01-95eb-4736-a633-9436dd693094", "url": "https://bsky.app/profile/darkwebinformer.com/post/3lwcjmr5qes2e"}, {"timestamp": "2025-08-13T19:10:20Z", "date_only": false, "value": "2025-08-13T19:10:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_News/7374", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "f9ac72d3-8063-4915-b84d-d52dc668e3c8", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2025-49457: Zoom Clients for Windows: Untrusted Search Path Vulnerability\nLink: https://darkwebinformer.com/cve-2025-49457-zoom-clients-for-windows-untrusted-search-path-vulnerability/", "url": "https://t.me/DarkWebInformer_News/7374"}, {"timestamp": "2025-08-13T21:10:12Z", "date_only": false, "value": "2025-08-13T21:10:12.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/KG2TpkTqLkrKcco6tldEMvACucw_WlYwXkvKrU8wVoi4yw", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "f037c3da-3228-4c15-a9cb-99d5583e8e24"}, {"timestamp": "2025-08-13T21:34:39.056Z", "date_only": false, "value": "2025-08-13T21:34:39.056535Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwcrqas3a22j", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "5b76b4a8-816b-40d4-8faf-ad9596e16019", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwcrqas3a22j"}, {"timestamp": "2025-08-14T03:56:14.834Z", "date_only": false, "value": "2025-08-14T03:56:14.834393Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-49457", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-08-14T03:56:14.834Z", "date_only": false, "value": "2025-08-14T03:56:14.834393Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49457", "record": "FKIE_CVE-2025-49457", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-08-14T09:30:39.431Z", "date_only": false, "value": "2025-08-14T09:30:39.431696Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lwdzqledlj24", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "e60acbbd-c3d7-43c7-9989-604a94dc8f09", "url": "https://bsky.app/profile/nimblenerd.social/post/3lwdzqledlj24"}, {"timestamp": "2025-08-14T10:30:18Z", "date_only": false, "value": "2025-08-14T10:30:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/08/14/zoom-patches-critical-windows-flaw.html", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "79f2ee91-3335-4570-a7b8-f6a3c23d69b2", "url": "https://threatintel.cc/2025/08/14/zoom-patches-critical-windows-flaw.html"}, {"timestamp": "2025-08-14T11:25:35.187Z", "date_only": false, "value": "2025-08-14T11:25:35.187782Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115026869267002974", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "576327e2-ef34-4092-bead-d2ad4bd15a4f", "url": "https://infosec.exchange/users/jbhall56/statuses/115026869267002974"}, {"timestamp": "2025-08-14T11:25:44.071Z", "date_only": false, "value": "2025-08-14T11:25:44.071038Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lwea6dmwis26", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "6a90d8b5-a152-413c-bacc-e578063d386f", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3lwea6dmwis26"}, {"timestamp": "2025-08-14T12:30:12.753Z", "date_only": false, "value": "2025-08-14T12:30:12.753674Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115027123394975363", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "de9b47a6-184d-49e2-8010-16cca5381177", "url": "https://infosec.exchange/users/edwardk/statuses/115027123394975363"}, {"timestamp": "2025-08-14T12:33:16.303Z", "date_only": false, "value": "2025-08-14T12:33:16.303347Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwedwppbvme2", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "b4012972-27e6-4e6a-a1e4-ad758cd6a8e2", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwedwppbvme2"}, {"timestamp": "2025-08-14T15:20:09.150Z", "date_only": false, "value": "2025-08-14T15:20:09.150365Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lwenbj6txa2q", "record": "cve-2025-49457", "field": "creation_timestamp", "uuid": "d96539d8-c1ec-4675-ae35-06ccce4714ed", "url": "https://bsky.app/profile/cyberhub.blog/post/3lwenbj6txa2q"}, {"timestamp": "2025-08-14T16:56:07.205Z", "date_only": false, "value": "2025-08-14T16:56:07.205080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwesn4jp5g2r", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "9c86d594-6749-4278-95bb-aff31f387c6b", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwesn4jp5g2r"}, {"timestamp": "2025-08-14T17:33:10.057Z", "date_only": false, "value": "2025-08-14T17:33:10.057513Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dtpnews.bsky.social/post/3lweupeourk2j", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "db586024-c24b-4945-b575-55a44aa7f4e8", "url": "https://bsky.app/profile/dtpnews.bsky.social/post/3lweupeourk2j"}, {"timestamp": "2025-08-14T17:33:16.094Z", "date_only": false, "value": "2025-08-14T17:33:16.094973Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/oknews.bsky.social/post/3lweupku6ao2l", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "fcbef515-44d1-4185-af48-dfdf64afad21", "url": "https://bsky.app/profile/oknews.bsky.social/post/3lweupku6ao2l"}, {"timestamp": "2025-08-15T05:35:46.704Z", "date_only": false, "value": "2025-08-15T05:35:46.704794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwg53jglws2d", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "f7a2d85a-9532-4061-aa0c-e94e3cfb6c17", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwg53jglws2d"}, {"timestamp": "2025-08-15T21:00:31.708Z", "date_only": false, "value": "2025-08-15T21:00:31.708885Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwhqqhloqmz2", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "8ce551a6-b859-4549-b25c-64ac468bb5bb", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwhqqhloqmz2"}, {"timestamp": "2025-08-16T22:13:54.430Z", "date_only": false, "value": "2025-08-16T22:13:54.430211Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwkfd4xwls2d", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "75b3c4cc-ab6c-4f93-9d96-79ad74b2a7e1", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwkfd4xwls2d"}, {"timestamp": "2025-08-18T20:09:25.777Z", "date_only": false, "value": "2025-08-18T20:09:25.777411Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwp7cghf3c25", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "428d3f42-08ff-492e-ab6b-bde21fa68835", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwp7cghf3c25"}, {"timestamp": "2025-08-20T11:13:15Z", "date_only": false, "value": "2025-08-20T11:13:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/15218", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "37578623-1532-405b-bb07-07035ce88817", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.\n\nThe vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score: 9.6), relates to a case of an untrusted search path that could pave the way for privilege escalation.\n\nOther vulnerabilities:\n\nCVE-2025-8355 (CVSS score: 7.5) - XML External Entity (XXE) injection vulnerability leading to server-side request forgery (SSRF)\n\nCVE-2025-8356 (CVSS score: 9.8) - Path traversal vulnerability leading to remote code execution\n\nhttps://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf\n\nhttps://www.zoom.com/en/trust/security-bulletin/zsb-25030/\n\nhttps://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "url": "https://t.me/cKure/15218"}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": true, "value": "2025-08-21", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-33439", "record": "CNVD-2026-33439", "field": "submitTime"}, {"timestamp": "2025-09-10T20:46:10.140Z", "date_only": false, "value": "2025-09-10T20:46:10.140476Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyj43aaqrs2g", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "77d775a0-39c7-41d8-ac01-c25033ca4dde", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyj43aaqrs2g"}, {"timestamp": "2026-02-26T17:48:42.934Z", "date_only": false, "value": "2026-02-26T17:48:42.934Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-49457", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T17:48:42.934Z", "date_only": false, "value": "2026-02-26T17:48:42.934Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-49457", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:31:20.540Z", "date_only": false, "value": "2026-06-17T09:31:20.540", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49457", "record": "FKIE_CVE-2025-49457", "field": "lastModified"}, {"timestamp": "2026-07-20T20:00:04.630Z", "date_only": false, "value": "2026-07-20T20:00:04.630991Z", "kind": "sighting", "label": "Seen", "source": "Telegram/e8Gfpk_ScLgRYm5TLKfxZ4PuCVECC1brGgRA0F6XawO4MHc", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "553dd446-102e-4c6e-bf3b-b3969ec4f84c"}, {"timestamp": "2026-07-21T00:00:19.854Z", "date_only": false, "value": "2026-07-21T00:00:19.854056Z", "kind": "sighting", "label": "Seen", "source": "Telegram/e8Gfpk_ScLgRYm5TLKfxZ4PuCVECC1brGgRA0F6XawO4MHc", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "10fbf154-afd3-4d9c-a137-5922e70f65ef"}, {"timestamp": "2026-07-29T12:01:56.869Z", "date_only": false, "value": "2026-07-29T12:01:56.869226Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "fa75b46d-2dc9-41d1-a682-39825a957d7a", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-07-30T00:02:07.661Z", "date_only": false, "value": "2026-07-30T00:02:07.661766Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "72813889-0854-407e-b871-ac91e1986965", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-08-01T19:00:03.627Z", "date_only": false, "value": "2026-08-01T19:00:03.627066Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "18675a63-cf65-4346-a69e-61093ea81121", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-08-02T00:00:22.786Z", "date_only": false, "value": "2026-08-02T00:00:22.786431Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-49457", "field": "creation_timestamp", "uuid": "a248ff35-49c9-49bb-a04d-1ed5a8fc0acc", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": true, "value": "2026-08-24", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-33439", "record": "CNVD-2026-33439", "field": "openTime"}]}