External Control of File Path in Zoom Workplace for macOS
CVE-2025-64738

5MEDIUM

Key Information:

Vendor

Zoom
Status
Zoom Workplace For Mac OS
Vendor
CVE Published:
13 November 2025

What is CVE-2025-64738?

An external control of file name or path vulnerability in Zoom Workplace for macOS prior to version 6.5.10 allows authenticated users to potentially disclose sensitive information through local access. This security flaw emphasizes the need for prompt updates and user awareness regarding application security.

Affected Version(s)

Zoom Workplace for macOS MacOS 0 < 6.5.10

References

https://www.zoom.com/en/trust/security-bulletin/zsb-25040

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-64738 : External Control of File Path in Zoom Workplace for macOS