External Control of File Path in Zoom Workplace for macOS
CVE-2025-64738

5MEDIUM

Key Information:

Vendor

Zoom
Status
Zoom Workplace For Mac OS
Vendor
CVE Published:
13 November 2025

What is CVE-2025-64738?

An external control of file name or path vulnerability in Zoom Workplace for macOS prior to version 6.5.10 allows authenticated users to potentially disclose sensitive information through local access. This security flaw emphasizes the need for prompt updates and user awareness regarding application security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Zoom Workplace for macOS MacOS 0 < 6.5.10

References

https://www.zoom.com/en/trust/security-bulletin/zsb-25040

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.