← back
CVE-2025-64740

Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature

CVSS 7.5 HIGHEPSS 0.1%CWE-347
Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected products
Zoom Communications Inc. · Zoom Workplace VDI Client

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.zoom.com/en/trust/security-bulletin/ZSB-25042