CVEFinder.io

CVE-2025-64739

🔶 medium
🔍 Scan for this CVE
Summary

External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.

CVSS Score
4.3
Medium
EPSS Score
0.1
Exploit Probability
Published Date
2025-11-13
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 5.4% of all 329,456 vulnerabilities in our database.

#311,645
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Nov 13, 2025
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-01-13
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CWE IDs (Weakness Types)
CWE-73

📦 Affected Products 6

Vendor Product Status Affected Versions
zoom rooms Affected
< 6.5.10
zoom meeting_software_development_kit Affected
< 6.5.10
zoom workplace_desktop Affected
< 6.5.10
zoom workplace_virtual_desktop_infrastructure Affected
< 6.3.14
zoom workplace_virtual_desktop_infrastructure Affected
≥ 6.4.10 < 6.4.12
zoom rooms_controller Affected
< 6.5.10

🔗 References 1

https://www.zoom.com/en/trust/security-bulletin/zsb-...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-53408 ⚠️ high 8.1 0.2 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.... 2026-06-12
CVE-2026-30906 ⚠️ high 7.8 0.0 Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user t... 2026-05-13
CVE-2026-30905 ⚠️ high 7.8 0.0 External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11... 2026-05-13
CVE-2026-30901 ⚠️ high 7.0 0.0 Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduc... 2026-03-11
CVE-2026-30902 ⚠️ high 7.8 0.0 Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalati... 2026-03-11
CVE-2026-30900 ⚠️ high 7.8 0.0 Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated... 2026-03-11
These CVEs affect the same products