PT-2025-36988 · Zoom · Zoom Workplace Vdi Plugin

Published 2025-09-09 · Updated 2025-09-09 · CVE-2025-58131

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Zoom Workplace VDI Plugin versions prior to 6.4.10 Zoom Workplace VDI Plugin versions prior to 6.2.15 Zoom Workplace VDI Plugin versions prior to 6.3.12

Description: A race condition exists in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon. This may allow an authenticated user to disclose information via network access.

Recommendations: Update to Zoom Workplace VDI Plugin version 6.4.10 or later. Update to Zoom Workplace VDI Plugin version 6.2.15 or later. Update to Zoom Workplace VDI Plugin version 6.3.12 or later.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2025-58131

Affected Products

Zoom Workplace Vdi Plugin

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-58131 · Security Note
• https://zoom.com/en/trust/security-bulletin/ZSB-25037 · Note
• https://twitter.com/CVEnew/status/1965557678303813949 · Twitter Post