CVE-2025-64741

HighCVSS 8.1

Published: 13/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

37th percentile - higher than 37% of all known CVEs

Summary

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Risk Assessment

An attacker may exploit the flaw to gain higher privileges in the application, potentially leading to unauthorized access to data or features.

Recommendation

Update Zoom Workplace for Android to version 6.5.10 or later.

Other vulnerabilities in Zoom Workplace for Android

CVE-2026-53418High
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Original NVD description (English source)

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS