CVE-2025-64738

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-64738

5.0 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.3 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

E

xternal control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.

References
Link Resource
https://www.zoom.com/en/trust/security-bulletin/zsb-25040 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*
History

13 Jan 2026, 20:49

Type Values Removed Values Added
First Time Zoom
Zoom meeting Software Development Kit
Zoom workplace Desktop
CPE cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*
References () https://www.zoom.com/en/trust/security-bulletin/zsb-25040 - () https://www.zoom.com/en/trust/security-bulletin/zsb-25040 - Vendor Advisory

13 Nov 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-13 15:15

Updated : 2026-01-13 20:49

NVD link : CVE-2025-64738

Mitre link : CVE-2025-64738

CVE.ORG link : CVE-2025-64738

JSON object : View

Products Affected

zoom

CWE
CWE-73

External Control of File Name or Path