CVE-2025-0146
Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access.
- Score
- CVSS 3.1 5.0 Medium
- Status
- Analyzed - security@zoom.us
- Published
- 2025-01-30
- Last modified
- 2025-01-30
- Weaknesses
- CWE-59
Affected products
- Meeting Software Development Kit (Zoom)
- Rooms (Zoom)
- Rooms Controller (Zoom)
- Video Software Development Kit (Zoom)
- Workplace Desktop (Zoom)
- Zoom Workplace App For Macos (Zoom Communications Inc)
References
- https://www.zoom.com/en/trust/security-bulletin/zsb-25005/
