CVE-2025-64738CWE-73

CVE-2025-64738

Medium · published November 13, 2025

CVSS v3.1
5.0
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2025-11-13T20:15Z
Affected products (2)
ProductVersionsFixed in
zoom/meeting_software_development_kit< 6.5.106.5.10
zoom/workplace_desktop< 6.5.106.5.10
References (1)
https://www.zoom.com/en/trust/security-bulletin/zsb-25040 · [email protected]
EPSS history
Timeline
  • 13 NOV 14:23Z
    Zoom Workplace for macOS - External Control of File Name or Path
    cvelistv5