CVE-2025-64738

Published: Nov 13, 2025Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.

Affected (2)

Products: Zoom: Meeting Software Development Kit, Workplace Desktop

Zoom

2 products

Meeting Software Development Kit

Workplace Desktop

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Software Development Kit	Before 6.5.10
Zoom Workplace Desktop	Before 6.5.10

Related CWEs

CWE-73

External Control of File Name or Path

The product allows user input to control or influence paths or file names that are used in filesystem operations.

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-25040

Source: security@zoom.us

Vendor Advisory

Timeline

No history available yet.