External Control of File Names in Zoom Clients by Zoom
CVE-2025-64739

4.3MEDIUM

Key Information:

Vendor

Zoom
Status
Zoom Clients
Vendor
CVE Published:
13 November 2025

What is CVE-2025-64739?

Certain Zoom Clients exhibit vulnerability that allows an unauthenticated user to manipulate file names or paths, potentially leading to unauthorized information disclosure via network access. This can expose sensitive data if exploited, making it imperative for users to implement protective measures.

Affected Version(s)

Zoom Clients Windows see references

References

https://www.zoom.com/en/trust/security-bulletin/zsb-25041

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.