CVE-2025-64738 Details
Description
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
A vulnerability exists in Zoom Workplace for macOS and the Zoom Workplace Meeting SDK for macOS, both prior to version 6.5.10. This vulnerability allows authenticated users to manipulate file names or paths, potentially leading to unauthorized information disclosure through local access.
Users are advised to update to the latest version of Zoom Workplace for macOS or the Zoom Workplace Meeting SDK for macOS. The latest version can be downloaded from the Zoom Download Center.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 13, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.zoom.com/en/trust/security-bulletin/zsb-25040 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-73 | External Control of File Name or Path | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| zoom meeting software development kit | < 6.5.10 |
CPE
Remediation
| |
| zoom workplace desktop | < 6.5.10 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 13, 2026 | Initial Analysis | [email protected] |
| Nov 13, 2025 | New CVE Received | [email protected] |