PT-2025-46840 · Zoom Video Communications · Zoom Workplace App For Android

Published 2025-11-13 · Updated 2025-11-18 · CVE-2025-64741

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoom Workplace for Android versions prior to 6.5.10

Description Improper authorization handling in Zoom Workplace for Android may allow an unauthenticated user to escalate privileges via network access. An unauthenticated attacker can exploit this flaw to gain elevated access.

Recommendations Update Zoom Workplace for Android to version 6.5.10 or later.

Fix

LPE

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2025-64741

Affected Products

Zoom Workplace App For Android

References · 6

• https://zoom.com/en/trust/security-bulletin/zsb-25043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64741 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64741 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1989002648280821937 · Twitter Post
• https://twitter.com/cracbot/status/1990736810805506514 · Twitter Post
• https://twitter.com/CveTodo/status/1988995111913484369 · Twitter Post