CVE-2025-58132
MediumCVSS 4.1Exploitation Probability (EPSS)
High risk78th percentile - higher than 78% of all known CVEs
Summary
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
Risk Assessment
Information disclosure can lead to leakage of sensitive data, potentially compromising confidentiality and trust in the organization.
Recommendation
Update the Zoom Client for Windows to the latest version. Restrict network access to the application and monitor user activity.
Other vulnerabilities in Zoom Client for Windows
See all- CVE-2026-108184High
Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.
- CVE-2026-53410High
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
Original NVD description (English source)
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS