CVE-2025-30669

Published: Nov 13, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.

Products: Zoom: Meeting Software Development Kit, Workplace Desktop, Workplace Virtual Desktop Infrastructure

3 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Software Development Kit	Before 6.5.10
Zoom Meeting Software Development Kit	Before 6.5.10
Zoom Workplace Desktop	Before 6.5.10
Zoom Workplace Desktop	Before 6.5.10
Zoom Workplace Virtual Desktop Infrastructure	Before 6.3.14
Zoom Workplace Virtual Desktop Infrastructure	From 6.4.10 to 6.4.12

Source: security@zoom.us

Vendor Advisory

No history available yet.