CVE Catalog
CVE-2025-58132
MediumCVSS 4.1Exploitation Probability (EPSS)
High risk1.82%
78th percentile - higher than 78% of all known CVEs
Summary
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
Risk Assessment
Information disclosure can lead to leakage of sensitive data, potentially compromising confidentiality and trust in the organization.
Recommendation
Update the Zoom Client for Windows to the latest version. Restrict network access to the application and monitor user activity.
Other vulnerabilities in Zoom Client for Windows
Original NVD description (English source)
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS