CVE-2025-64738
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to disclose information via local access.
Risk Assessment
A local attacker could access sensitive information, potentially compromising data confidentiality.
Recommendation
Update Zoom Workplace for macOS to version 6.5.10 or later.
Other vulnerabilities in Zoom Workplace
See all- CVE-2026-53408High
In Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS, improper authorization in the handler for custom URL scheme may allow an unauthenticated user to conduct an escalation of privilege via network access.
- CVE-2025-62484High
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
- CVE-2025-62482Medium
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
Original NVD description (English source)
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS