Zoom Workplace Clients for Windows - Incorrect Authorization

  • ZSB-25035
  • CVE-2025-58134
  • Medium
  • 4.3
  • CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access.

 

Users can help keep themselves secure by applying the latest updates available at https://zoom.us/download.

  • Zoom Workplace for Windows before version 6.5.0
  • Zoom Workplace VDI Client for Windows before version 6.3.14 and 6.4.12 in their respective tracks.
  • Zoom Rooms Controller for Windows before version 6.5.0
  • Zoom Rooms for Windows before version 6.5.0
  • Zoom Meeting SDK for Windows before version 6.5.0

Reported by Zoom Engineering Security.

Revision Date Description
1.1 09/24/2025

Corrected several product names, no change in impacted products.
1.0 09/09/2025

Initial publication.