{"metadata": {"vulnerability": "cve-2025-8355", "count": 44, "kinds": {"milestone": 5, "sighting": 27, "kev": 0, "other": 12}}, "data": [{"timestamp": "2025-07-30T13:54:04.373Z", "date_only": false, "value": "2025-07-30T13:54:04.373Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-8355", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0262", "record": "NCSC-2025-0262", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-08T15:27:00Z", "date_only": false, "value": "2025-08-08T15:27:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Xerox", "record": "cve-2025-8355", "field": "containers.cna.datePublic"}, {"timestamp": "2025-08-08T15:31:44.554Z", "date_only": false, "value": "2025-08-08T15:31:44.554Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-8355", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-08-08T15:43:07.165Z", "date_only": false, "value": "2025-08-08T15:43:07.165Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Xerox", "record": "cve-2025-8355", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-08T16:02:33.856Z", "date_only": false, "value": "2025-08-08T16:02:33.856898Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-8355", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-08-08T16:02:33.856Z", "date_only": false, "value": "2025-08-08T16:02:33.856898Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-8355", "record": "FKIE_CVE-2025-8355", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-08-08T16:02:42.866Z", "date_only": false, "value": "2025-08-08T16:02:42.866Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-8355", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-08-08T16:02:42.866Z", "date_only": false, "value": "2025-08-08T16:02:42.866Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-8355", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-08T16:15:27Z", "date_only": false, "value": "2025-08-08T16:15:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6C2V-98PF-9VGR", "record": "GHSA-6C2V-98PF-9VGR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-08-08T16:15:27.917Z", "date_only": false, "value": "2025-08-08T16:15:27.917", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-8355", "record": "FKIE_CVE-2025-8355", "field": "published"}, {"timestamp": "2025-08-08T18:32:22Z", "date_only": false, "value": "2025-08-08T18:32:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6C2V-98PF-9VGR", "record": "GHSA-6C2V-98PF-9VGR", "field": "published"}, {"timestamp": "2025-08-08T18:32:22Z", "date_only": false, "value": "2025-08-08T18:32:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6C2V-98PF-9VGR", "record": "GHSA-6C2V-98PF-9VGR", "field": "modified"}, {"timestamp": "2025-08-11T11:21:56.556Z", "date_only": false, "value": "2025-08-11T11:21:56.556581Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw4okhoabkr2", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "d1b1f060-d18e-483d-a2fc-e6bd860acdc0", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw4okhoabkr2"}, {"timestamp": "2025-08-11T11:40:37.388Z", "date_only": false, "value": "2025-08-11T11:40:37.388336Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lw4plysvmlm2", "record": "cve-2025-8355", "field": "creation_timestamp", "uuid": "b3522882-11a7-4e34-97db-979add55b9fa", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lw4plysvmlm2"}, {"timestamp": "2025-08-11T13:26:09.410Z", "date_only": false, "value": "2025-08-11T13:26:09.410443Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/paxioncyber.bsky.social/post/3lw4vil66k22m", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "0f8d45b3-2917-47fb-a259-c96e15b1b39f", "url": "https://bsky.app/profile/paxioncyber.bsky.social/post/3lw4vil66k22m"}, {"timestamp": "2025-08-11T16:18:32.272Z", "date_only": false, "value": "2025-08-11T16:18:32.272493Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lw5752gqbk2r", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "794a1582-cd36-48ff-af72-bc1877c971ac", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lw5752gqbk2r"}, {"timestamp": "2025-08-11T19:33:58.330Z", "date_only": false, "value": "2025-08-11T19:33:58.330167Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw5jzxslko42", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "3f90e7b0-2526-4a13-b7a0-1b47aa6a9917", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw5jzxslko42"}, {"timestamp": "2025-08-12T05:41:07.007Z", "date_only": false, "value": "2025-08-12T05:41:07.007255Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw6lxy6l7nc2", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "f8989613-844a-4464-b8b1-e81309456ce5", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw6lxy6l7nc2"}, {"timestamp": "2025-08-12T11:05:46.134Z", "date_only": false, "value": "2025-08-12T11:05:46.134536Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw75ythalcp2", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "15add373-3901-48ee-a5ae-f3f6e9d8f7f5", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw75ythalcp2"}, {"timestamp": "2025-08-12T19:01:24.527Z", "date_only": false, "value": "2025-08-12T19:01:24.527567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw7ylynmne62", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "46f1c42f-0fbd-4944-8a9a-70e9d8833fef", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw7ylynmne62"}, {"timestamp": "2025-08-12T21:42:12.993Z", "date_only": false, "value": "2025-08-12T21:42:12.993588Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwabdehiqak2", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "2da750a1-3d85-44d4-8429-bd1ff6edfd81", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwabdehiqak2"}, {"timestamp": "2025-08-13T06:41:31.237Z", "date_only": false, "value": "2025-08-13T06:41:31.237981Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwb7sou6oel2", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "86ea92a8-ffb1-4cdc-891b-2c4af6e3ed37", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwb7sou6oel2"}, {"timestamp": "2025-08-13T09:23:52.217Z", "date_only": false, "value": "2025-08-13T09:23:52.217307Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwbis2guw3f2", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "644c2610-282e-4b38-8d62-b82df02d7d38", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwbis2guw3f2"}, {"timestamp": "2025-08-13T12:48:23.193Z", "date_only": false, "value": "2025-08-13T12:48:23.193191Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwbubqy4xi32", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "f9976856-360e-48fb-87e3-50d536201579", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwbubqy4xi32"}, {"timestamp": "2025-08-13T14:51:30.694Z", "date_only": false, "value": "2025-08-13T14:51:30.694097Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lwc37fuqrq2e", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "20825f44-7de1-4f6e-b927-31f4087397e0", "url": "https://bsky.app/profile/buherator.bsky.social/post/3lwc37fuqrq2e"}, {"timestamp": "2025-08-14T07:00:50.843Z", "date_only": false, "value": "2025-08-14T07:00:50.843871Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0262", "record": "NCSC-2025-0262", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-08-14T07:00:50.843Z", "date_only": false, "value": "2025-08-14T07:00:50.843871Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0262", "record": "NCSC-2025-0262", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-08-14T07:00:50.843Z", "date_only": false, "value": "2025-08-14T07:00:50.843871Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0262", "record": "NCSC-2025-0262", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-08-17T21:05:13.597Z", "date_only": false, "value": "2025-08-17T21:05:13.597888Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwmrx6xcns2x", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "3937f4b2-1a28-41ab-a24e-f58094494b58", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwmrx6xcns2x"}, {"timestamp": "2025-08-18T08:00:01.548Z", "date_only": false, "value": "2025-08-18T08:00:01.548328Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lwnwk7v5n52g", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "9ca6d354-4678-470d-a78c-9d9ffe689cf8", "url": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lwnwk7v5n52g"}, {"timestamp": "2025-08-19T02:28:16.209Z", "date_only": false, "value": "2025-08-19T02:28:16.209266Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwpuhvmi2s2i", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "269106ef-56cb-43a8-99cb-4294d918e1e6", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwpuhvmi2s2i"}, {"timestamp": "2025-08-20T11:13:15Z", "date_only": false, "value": "2025-08-20T11:13:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/15218", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "e52f93fc-450b-4a9e-bcd3-afb185742b30", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.\n\nThe vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score: 9.6), relates to a case of an untrusted search path that could pave the way for privilege escalation.\n\nOther vulnerabilities:\n\nCVE-2025-8355 (CVSS score: 7.5) - XML External Entity (XXE) injection vulnerability leading to server-side request forgery (SSRF)\n\nCVE-2025-8356 (CVSS score: 9.8) - Path traversal vulnerability leading to remote code execution\n\nhttps://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf\n\nhttps://www.zoom.com/en/trust/security-bulletin/zsb-25030/\n\nhttps://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "url": "https://t.me/cKure/15218"}, {"timestamp": "2025-08-20T12:58:31.798Z", "date_only": false, "value": "2025-08-20T12:58:31.798527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwti5r2rp22i", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "e038e4b5-a7c9-4cc8-ae07-cb2f0520d097", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwti5r2rp22i"}, {"timestamp": "2026-04-07T21:00:00Z", "date_only": false, "value": "2026-04-07T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://jvn.jp/en/vu/JVNVU90253343/", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "ebf83d03-6253-4631-8b09-e5fd7bf3cb1e", "url": "https://jvn.jp/en/vu/JVNVU90253343/"}, {"timestamp": "2026-06-17T10:06:48.860Z", "date_only": false, "value": "2026-06-17T10:06:48.860", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-8355", "record": "FKIE_CVE-2025-8355", "field": "lastModified"}, {"timestamp": "2026-07-29T12:01:56.930Z", "date_only": false, "value": "2026-07-29T12:01:56.930344Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "20673cac-654c-4f26-a282-263519583e03", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-07-30T00:02:07.708Z", "date_only": false, "value": "2026-07-30T00:02:07.708892Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "dc74134a-8835-4876-8b7f-cf232314b219", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-08-01T19:00:03.688Z", "date_only": false, "value": "2026-08-01T19:00:03.688643Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "bf18830b-8e25-48e3-ab4f-dd82da555941", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-08-02T00:00:22.833Z", "date_only": false, "value": "2026-08-02T00:00:22.833612Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1383", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "a91ba53f-d15d-4b50-966c-3fb332ddd557", "url": "https://t.me/cyberdom_business/1383"}, {"timestamp": "2026-08-14T16:00:07.291Z", "date_only": false, "value": "2026-08-14T16:00:07.291322Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/1030", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "f2835a1e-2fa6-4e79-8987-2b193d3dbaed", "url": "https://t.me/purp_sec/1030"}, {"timestamp": "2026-08-14T16:00:09.112Z", "date_only": false, "value": "2026-08-14T16:00:09.112620Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/1029", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "24754944-1cab-4799-83e9-17056258408b", "url": "https://t.me/purp_sec/1029"}, {"timestamp": "2026-08-15T00:00:14.116Z", "date_only": false, "value": "2026-08-15T00:00:14.116124Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/purp_sec/1029", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "1fa6c723-5302-451b-984e-f41de36cd79f", "url": "https://t.me/purp_sec/1029"}, {"timestamp": "2026-08-15T00:00:14.240Z", "date_only": false, "value": "2026-08-15T00:00:14.240058Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/purp_sec/1030", "record": "CVE-2025-8355", "field": "creation_timestamp", "uuid": "3586994d-2c0e-42f3-ade3-a928380119c8", "url": "https://t.me/purp_sec/1030"}]}