CVE-2025-30662 — Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following

CVE-2025-30662

Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following PUBLISHED

Description (CNA)

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.

Affected (CNA)

Vendor / product	Versions
Zoom Communications Inc. / Zoom Workplace VDI Plugin macOS Universal installer	affected see references

CWE

CWE-646

References

https://www.zoom.com/en/trust/security-bulletin/zsb-25045

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.