PT-2025-46835 · Zoom Communications+1 · Zoom Workplace Vdi Plugin Macos Universal Installer+1

CVE-2025-30662 · Publicado 2025-11-13 · Atualizado 2026-01-09

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Média

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Zoom Workplace VDI Plugin versions 6.3.0 through 6.3.13 Zoom Workplace VDI Plugin versions 6.4.0 through 6.4.13 Zoom Workplace VDI Plugin versions 6.5.0 through 6.5.9

Description The installer for the Zoom Workplace VDI Plugin on macOS is susceptible to a flaw related to symlink following. This issue, present in versions prior to 6.3.14, 6.4.14, and 6.5.10, could allow an authenticated user to disclose information through network access.

Recommendations Update to Zoom Workplace VDI Plugin version 6.3.14 or later. Update to Zoom Workplace VDI Plugin version 6.4.14 or later. Update to Zoom Workplace VDI Plugin version 6.5.10 or later.

Correção

Enumeração de Fraquezas

CWE-646

Identificadores relacionados

CVE-2025-30662

Produtos afetados

Zoom Workplace Vdi Plugin Macos Universal Installer

Workplace Virtual Desktop Infrastructure

Referências · 4

• https://zoom.com/en/trust/security-bulletin/zsb-25045 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-30662 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-30662 · Aviso do Fabricante
• https://t.me/cveNotify/148315 · Publicação no Telegram