CVE-2025-30662: Reliance on File Name or Extension of Externally-Supplied File

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access...

PT-2025-46831

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access...

CVE-2025-62484: Inefficient Regular Expression Complexity

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access...

PT-2025-46714

Name of the Vulnerable Software and Affected Versions Zoom Workplace VDI Client for Windows versions prior to 6.3.14 Zoom Workplace VDI Client for Windows versions prior to 6.4.12 Zoom Workplace VDI Client for Windows versions prior to 6.5.10 Description A flaw exists in the installer for Zoom...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25041)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25041 advisory. - External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25044)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25044 advisory. - Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25046)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25046 advisory. - Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity vi...

Zoom Workplace VDI Client < 6.3.14 Vulnerability (ZSB-25044)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.3.14. It is, therefore, affected by a vulnerability as referenced in the ZSB-25044 advisory. - Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25047)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25047 advisory. - Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25047)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25047 advisory. - Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to...

Zoom Workplace VDI Client < 6.3.14 Vulnerability (ZSB-25042)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.3.14. It is, therefore, affected by a vulnerability as referenced in the ZSB-25042 advisory. - Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow ...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25044)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25044 advisory. - Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information...

Zoom Workplace VDI Client < 6.3.14 Vulnerability (ZSB-25047)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.3.14. It is, therefore, affected by a vulnerability as referenced in the ZSB-25047 advisory. - Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25040)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25040 advisory. - External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduc...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25041)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25041 advisory. - External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of...

Zoom Workplace VDI Client < 6.3.14 Vulnerability (ZSB-25041)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.3.14. It is, therefore, affected by a vulnerability as referenced in the ZSB-25041 advisory. - External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosur...

Zoom Workplace Desktop App < 6.3.10 Vulnerability (ZSB-25015)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25015 advisory. - Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial ...

Zoom Workplace VDI Client < 6.2.12 Vulnerability (ZSB-25015)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.2.12. It is, therefore, affected by a vulnerability as referenced in the ZSB-25015 advisory. - Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial o...

AI-Powered Wiz: From Agents to Everyday Intelligence

How Wiz AI Agents and Integrations Meet You Where You Work...

Zoom Workplace VDI Client < 6.3.15 Vulnerability (ZSB-25038)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.3.15. It is, therefore, affected by a vulnerability as referenced in the ZSB-25038 advisory. - Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of...