Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 13 Nov 2025 14:45:00 +0000

Type Values Removed Values Added
Description Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
Title Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature
Weaknesses CWE-347
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Zoom

Published:

Updated: 2025-11-13T14:35:39.025Z

Reserved: 2025-11-10T19:56:35.266Z

Link: CVE-2025-64740

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-11-13T15:15:53.820

Modified: 2025-11-13T15:15:53.820

Link: CVE-2025-64740

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.