CVE-2025-64740 Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2025-64740 Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2025-64740

CVE-2025-64740 affects Zoom Workplace VDI Client for Windows prior to 6.3.14, 6.4.12, or 6.5.10. Root cause: improper verification of the installer’s cryptographic signature, enabling an authenticated local user to escalate privileges. Remediation: upgrade to the fixed versions (6.3.14+, 6.4.12+,...

CVE-2025-64738

CVE-2025-64738 affects Zoom Workplace on macOS prior to 6.5.10. An authenticated user can trigger external control of a file name or path, enabling information disclosure via local access. The issue is tied to Zoom Workplace versions before 6.5.10; remediation is to upgrade to 6.5.10 or later per...

CVE-2025-64738 Zoom Workplace for macOS - External Control of File Name or Path

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access...

CVE-2025-64738 Zoom Workplace for macOS - External Control of File Name or Path

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access...

Zoom Workplace VDI Plugin 安全漏洞

Zoom Workplace VDI Plugin is a plugin from Zoom USA. A security vulnerability exists in Zoom Workplace VDI Plugin versions prior to 6.3.14, prior to 6.4.14, and prior to 6.5.10, which stems from symbolic link following and could lead to information disclosure...

CVE-2025-64741: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2025-64740: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2025-64738: External Control of File Name or Path

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access...

CVE-2025-62482: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access...

PT-2025-46839

Name of the Vulnerable Software and Affected Versions Zoom Workplace Clients versions prior to 6.5.10 Description An inefficient regular expression complexity in certain Zoom Workplace Clients may allow an unauthenticated user to conduct an escalation of privilege via network access. The issue...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.5.10, which stems from improper handling of authorization and may result in elevated privileges...

PT-2025-46837

Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access...

PT-2025-46835

Name of the Vulnerable Software and Affected Versions Zoom Workplace VDI Plugin versions 6.3.0 through 6.3.13 Zoom Workplace VDI Plugin versions 6.4.0 through 6.4.13 Zoom Workplace VDI Plugin versions 6.5.0 through 6.5.9 Description The installer for the Zoom Workplace VDI Plugin on macOS is...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.5.10, which originates from an external control over file names or paths and could lead to information disclosure...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.5.10, which stems from susceptibility to cross-site scripting attacks that may affect system integrity...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.5.10, which stems from insufficient regular expression complexity and could lead to elevation of privilege via network access by an unauthenticated user...

Zoom Workplace VDI Client 安全漏洞

Zoom Workplace VDI Client is a video conferencing software client for virtual desktop architecture environments from Zoom USA. A security vulnerability exists in Zoom Workplace VDI Client that stems from the installer not verifying cryptographic signatures, which could result in elevated privileg...

PT-2025-46840

Name of the Vulnerable Software and Affected Versions Zoom Workplace for Android versions prior to 6.5.10 Description Improper authorization handling in Zoom Workplace for Android may allow an unauthenticated user to escalate privileges via network access. An unauthenticated attacker can exploit...