CVE-2025-64740

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-64740

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

I

mproper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

References
Link Resource
https://www.zoom.com/en/trust/security-bulletin/ZSB-25042 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
History

13 Jan 2026, 20:51

Type Values Removed Values Added
First Time Zoom
Zoom workplace Virtual Desktop Infrastructure
CPE cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
References () https://www.zoom.com/en/trust/security-bulletin/ZSB-25042 - () https://www.zoom.com/en/trust/security-bulletin/ZSB-25042 - Vendor Advisory

13 Nov 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-13 15:15

Updated : 2026-01-13 20:51

NVD link : CVE-2025-64740

Mitre link : CVE-2025-64740

CVE.ORG link : CVE-2025-64740

JSON object : View

Products Affected

zoom

CWE
CWE-347

Improper Verification of Cryptographic Signature