Improper Cryptographic Signature Verification in Zoom Workplace VDI Client

CVE-2025-64740

What is CVE-2025-64740?

The Zoom Workplace VDI Client for Windows is affected by a vulnerability due to improper verification of cryptographic signatures during installation. This flaw could allow an authenticated user to escalate privileges, potentially leading to unauthorized access and control over the system via local user actions. It is crucial for users and administrators to be aware of this security issue and apply any available patches or mitigations as outlined in the vendor's security bulletin.

References