CVE-2025-64741

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.zoom.com/en/trust/security-bulletin/zsb-25043	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zoom:meeting_software_development_kit::::::android::*
	cpe:2.3:a:zoom:workplace::::::android::*

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Manejo inadecuado de la autorización en Zoom Workplace para Android anterior a la versión 6.5.10 puede permitir a un usuario no autenticado realizar una escalada de privilegios a través de acceso a la red.

Information

Published : 2025-11-13 15:15

Updated : 2026-10-18 20:10

NVD link : CVE-2025-64741

Mitre link : CVE-2025-64741

CVE.ORG link : CVE-2025-64741

JSON object : View

Products Affected

zoom

meeting_software_development_kit
workplace

CWE

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

{"id": "CVE-2025-64741", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-64741", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-11-14T04:55:33.073352Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@zoom.us", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@zoom.us", "affectedData": [{"vendor": "Zoom Communications Inc.", "product": "Zoom Workplace for Android", "versions": [{"status": "affected", "version": "0", "lessThan": "6.5.10", "versionType": "custom"}], "platforms": ["Android"], "defaultStatus": "unaffected"}]}], "published": "2025-11-13T15:15:54.110", "references": [{"url": "https://www.zoom.com/en/trust/security-bulletin/zsb-25043", "tags": ["Vendor Advisory"], "source": "security@zoom.us"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@zoom.us", "description": [{"lang": "en", "value": "CWE-74"}]}], "descriptions": [{"lang": "en", "value": "Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access."}, {"lang": "es", "value": "Manejo inadecuado de la autorizaci\u00f3n en Zoom Workplace para Android anterior a la versi\u00f3n 6.5.10 puede permitir a un usuario no autenticado realizar una escalada de privilegios a trav\u00e9s de acceso a la red."}], "lastModified": "2026-10-18T20:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "98DD5270-A4AE-4E08-A2E1-5A7DF2E76F36", "versionEndExcluding": "6.5.10"}, {"criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "019D6D44-FAB4-47EC-9A82-CDCA374293F1", "versionEndExcluding": "6.5.10"}], "operator": "OR"}]}], "sourceIdentifier": "security@zoom.us"}