CVEFinder.io

CVE-2025-30669

🔶 medium
Summary

Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.

CVSS Score
4.8
Medium
EPSS Score
0.1
Exploit Probability
Published Date
2025-11-13
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 13.5% of all 365,968 vulnerabilities in our database.

#316,658
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Nov 13, 2025
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-10-07
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE IDs (Weakness Types)
CWE-295

📦 Affected Products 4

Vendor Product Status Affected Versions
zoom meeting_software_development_kit Affected
< 6.5.10
zoom workplace_desktop Affected
< 6.5.10
zoom workplace_virtual_desktop_infrastructure Affected
< 6.3.14
zoom workplace_virtual_desktop_infrastructure Affected
≥ 6.4.10 < 6.4.12

🔗 References 1

https://www.zoom.com/en/trust/security-bulletin/zsb-...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-53410 ⚠️ high 7.0 0.1 A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Cl... 2026-07-16
CVE-2026-53412 ⛔ critical 9.8 0.7 Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Wind... 2026-07-16
CVE-2026-53411 ⚠️ high 7.8 0.1 A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Cl... 2026-07-16
CVE-2026-53408 ⚠️ high 8.1 0.2 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.... 2026-06-12
CVE-2026-30905 ⚠️ high 7.8 0.0 External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11... 2026-05-13
CVE-2026-30900 ⚠️ high 7.8 0.0 Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated... 2026-03-11
These CVEs affect the same products