Medium severity5.0NVD Advisory· Published Nov 13, 2025· Updated Jun 17, 2026

CVE-2025-64738

Description

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoom Video Communications, Inc./Meeting Software Development Kit
cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*
Range: <6.5.10
Zoom Video Communications, Inc./Workplace Desktop
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*
Range: <6.5.10
Zoom Video Communications, Inc./Workplacellm-create
Range: <6.5.10
Zoom Video Communications, Inc./Zoom Workplace Apps for iOScpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

www.zoom.com/en/trust/security-bulletin/zsb-25040nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.325
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000