CVE-2025-58131CWE-367

Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race Condition

Medium · published September 9, 2025

CVSS v3.1
6.6
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or before 6.2.15 and 6.3.12 in their respective tracks) may allow an authenticated user to conduct a disclosure of information via network access.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00110 · 1.2th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2025-09-09T21:48Z
EPSS history
Timeline
  • 09 SEP 21:48Z
    Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race Condition
    cvelistv5