# MA-1361.072025: MyCERT Advisory - Security Updates – Zoom Clients

**Date:** 11 Jul 2025  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1361.072025  
**Advisory ID:** MA-1361.072025

---

**1.0 Introduction**
Recently, Zoom has issued a security update to address six new vulnerabilities affecting various Zoom Clients and the Zoom Workplace application across Windows, macOS, iOS and Linux platforms.
**2.0 Impact**
This vulnerability includes buffer overflow, improper authentication, cross-site scripting, and certificate validation flaws. Exploitation could result in arbitrary code execution, session hijacking or bypassing of security controls.
**3.0 Affected Products**
- CVE-2025-49465 (Medium) – Zoom Clients for Windows – Classic Buffer Overflow
- CVE-2025-49464 (Medium) – Zoom Clients for macOS – Improper Authentication
- CVE-2025-49463 (Medium) – Zoom Client for iOS – Insufficient Control Flow Management
- CVE-2025-49462 (Low) – Zoom Clients – Cross-site Scripting
- CVE-2025-46789 (Medium) – Zoom Clients for Windows – Classic Buffer Overflow
- CVE-2025-46788 (High) – Zoom Workplace for Linux – Improper Certificate Validation
**4.0 Recommendations**
Users and system administrators are encouraged to review the [Zoom Security Bulletin](https://www.zoom.com/en/trust/security-bulletin/) and upgrade to the latest version.
Kindly refer to the URL for more information:
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25028/>
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25027/>
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25026/>
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25025/>
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25024/>
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25023/>
Generally, CyberSecurity Malaysia advises the users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact us through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web: <https://www.cybersecurity.my>
**5.0    References**
- <https://www.zoom.com/en/trust/security-bulletin/>
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25028/>
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25027/>
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25026/>
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25025/>
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25024/>
- <https://www.zoom.com/en/trust/security-bulletin/ZSB-25023/>