by Kastro
Paper/Archive/CVE-2025-46788

CVE-2025-46788

Zoom Communications Inc. Zoom Workplace for Linux — Zoom Workplace for Linux - Improper Certificate Validation

EPSS 0.3%CVSS 9.1
critical.is priorityof 100
31
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 20.3.203 × 204.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access.

Affected

ProductAffectedFixed inSource
Zoom Workplace for Linux< 6.4.136.4.13CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Zoom (CNA)7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refhttps://www.zoom.com/en/trust/security-bulletin/zsb-25023