CVE-2025-0151
Published: 11 March 2025
Summary
CVE-2025-0151 is a high-severity Use After Free (CWE-416) vulnerability in Zoom Meeting Software Development Kit. Its CVSS base score is 8.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 34.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2025-0151 is a use-after-free vulnerability (CWE-416) affecting some Zoom Workplace Apps. Published on 2025-03-11, it carries a CVSS v3.1 base score of 8.5 (AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H). The flaw may enable an authenticated user to conduct an escalation of privilege via network access.
An attacker with low privileges, such as an authenticated user on the network, can exploit this vulnerability despite its high attack complexity and lack of required user interaction. Successful exploitation changes the scope to high and grants high impacts across confidentiality, integrity, and availability, potentially allowing the attacker to elevate privileges within the affected Zoom Workplace Apps.
Zoom has published details and mitigation guidance in security bulletin ZSB-25010, available at https://www.zoom.com/en/trust/security-bulletin/zsb-25010/.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-7355
Vulnerability details
Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Use-after-free vulnerability in Zoom client apps directly enables remote authenticated privilege escalation (high impact, scope change), matching Exploitation for Privilege Escalation.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Requires timely identification, reporting, and remediation of flaws like this use-after-free vulnerability to prevent privilege escalation exploitation.
Implements memory protection mechanisms such as address space layout randomization and data execution prevention that directly mitigate use-after-free vulnerabilities.
Enforces least privilege to limit the scope and impact of potential privilege escalation even if the use-after-free is exploited.