by Kastro
Paper/Archive/CVE-2025-64741

CVE-2025-64741

Zoom Communications Inc. Zoom Workplace for Android — Zoom Workplace for Android - Improper Authorization Handling

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 37.9.379 × 207.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Affected

ProductAffectedFixed inSource
Zoom Workplace for Android< 6.5.106.5.10CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Zoom (CNA)8.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refzoom.com/en/trust/security-bulletin/zsb-25043