CVE-2025-30662

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access...

CVE-2025-62484

CVE-2025-62484 affects Zoom Workplace Clients prior to 6.5.10. The issue is described as inefficient regular expression complexity that may allow an unauthenticated user to escalate privileges via network access. Connected sources consistently state the vulnerable software and version range and t...

CVE-2025-62484 Zoom Workplace Clients - Inefficient Regular Expression Complexity

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2025-62484 Zoom Workplace Clients - Inefficient Regular Expression Complexity

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2025-62483

CVE-2025-62483 affects Zoom Clients prior to v6.5.10, where improper removal of sensitive information could allow an unauthenticated user to disclose data over the network. Connected sources corroborate the issue and note a fixed version (6.5.10) across Zoom Workplace and Zoom Clients. The NVD/NC...

CVE-2025-62483 Zoom Clients - Improper Removal of Sensitive Information

Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-62483 Zoom Clients - Improper Removal of Sensitive Information

Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-62482 Zoom Workplace for Windows - Cross-site Scripting

Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access...

CVE-2025-62482

CVE-2025-62482 corresponds to a cross-site scripting flaw in Zoom Workplace for Windows, fixed in versions 6.5.10 and later. Affects Zoom Workplace prior to 6.5.10; an unauthenticated attacker could impact integrity via network access. Connected sources confirm the vulnerability and the vendor-pr...

EUVD-2025-175307

Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access...

CVE-2025-62482 Zoom Workplace for Windows - Cross-site Scripting

Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access...

EUVD-2025-175306

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access...

CVE-2025-30662 Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access...

CVE-2025-30662

The CVE-2025-30662 issue is a symlink-following flaw in the macOS installer for Zoom Workplace VDI Plugin, affecting Universal installers prior to 6.3.14, 6.4.14, and 6.5.10. The root cause is symlink following during installation, which could allow an authenticated user to disclose information v...

CVE-2025-30662 Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access...

CVE-2025-30669 Zoom Workplace Clients - Improper Certificate Validation

Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access...

CVE-2025-30669 Zoom Workplace Clients - Improper Certificate Validation

Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access...

CVE-2025-30669

CVE-2025-30669 affects Zoom Workplace/Zoom Clients (prior to fixed versions such as 6.5.10). The root cause described in connected advisories is improper certificate validation, which may allow an unauthenticated attacker to disclose information via adjacent access. The issue spans Zoom Client co...

CVE-2025-64741

CVE-2025-64741 : Zoom Workplace for Android before 6.5.10 has improper authorization handling that could allow an unauthenticated attacker to escalate privileges over the network. Several connected advisories indicate Zoom fixed vulnerabilities in Zoom Workplace and Zoom Clients for versions prio...

CVE-2025-64741 Zoom Workplace for Android - Improper Authorization Handling

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access...