CVE-2025-64739
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
Risk Assessment
This may lead to unauthorized information disclosure, posing a risk to data confidentiality.
Recommendation
Update the Zoom client to the latest version containing the security fix.
Other vulnerabilities in Zoom Clients
See all- CVE-2026-53415High
Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access.
- CVE-2026-53414Medium
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.
- CVE-2026-53413High
Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.
- CVE-2025-62483Medium
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
- CVE-2025-30669Medium
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
- CVE-2023-39218Medium
In Zoom clients before version 5.14.10, there is a client-side enforcement issue of server-side security that may allow a privileged user to enable information disclosure via network access.
- CVE-2023-36535High
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.
- CVE-2023-36532Medium
Buffer overflow in Zoom Clients before version 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.
Original NVD description (English source)
External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS