High severity7.5NVD Advisory· Published Nov 13, 2025· Updated Jun 17, 2026

CVE-2025-64740

Description

Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoom Video Communications, Inc./Workplace Virtual Desktop Infrastructure
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
Range: <6.3.14
Zoom Video Communications, Inc./Zoom Workplace VDI Clientllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: see references

Patches

Vulnerability mechanics

References

www.zoom.com/en/trust/security-bulletin/ZSB-25042nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000