CVE-2025-8356

Zoom and Xerox patch critical Windows and FreeFlow Core flaws that could enable privilege escalation and remote code execution

News, Risk, Vulnerabilities

August 14, 2025

Zoom and Xerox released patches for critical vulnerabilities in Zoom Clients for Windows and FreeFlow Core, including a high-severity privilege-escalation flaw (CVE-2025-49457) in Windows Zoom clients and two severe flaws in FreeFlow Core (CVE-2025-8355 and CVE-2025-8356) that could enable remote code execution, prompting enterprise patches and risk-mitigation guidance.