CVE-2025-30662

MEDIUM

Zoom Workplace VDI Plugin <6.3.14, <6.4.14, <6.5.10 - Info Disclosure

Title source: llm
STIX 2.1

Description

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.

References (1)

Core 1

Scores

CVSS v3 6.6
EPSS 0.0001
EPSS Percentile 2.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-646
Status published
Products (1)
zoom/workplace_virtual_desktop_infrastructure < 6.3.14
Published Nov 13, 2025
Tracked Since Feb 18, 2026