CVE-2025-58131

Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race Condition

CVSS 6.6 MEDIUMEPSS 0.1%CWE-367

Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or before 6.2.15 and 6.3.12 in their respective tracks) may allow an authenticated user to conduct a disclosure of information via network access.

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Affected products

Zoom Communications, Inc · Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.zoom.com/en/trust/security-bulletin/ZSB-25037