CVE-2025-64740

Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*

History

13 Jan 2026, 20:51

Type Values Removed Values Added
References () https://www.zoom.com/en/trust/security-bulletin/ZSB-25042 - () https://www.zoom.com/en/trust/security-bulletin/ZSB-25042 - Vendor Advisory
CPE cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
First Time Zoom workplace Virtual Desktop Infrastructure
Zoom

13 Nov 2025, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-11-13 15:15

Updated : 2026-01-13 20:51


NVD link : CVE-2025-64740

Mitre link : CVE-2025-64740

CVE.ORG link : CVE-2025-64740


JSON object : View

Products Affected

zoom

  • workplace_virtual_desktop_infrastructure
CWE
CWE-347

Improper Verification of Cryptographic Signature