CVE-2025-30669

Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - security@zoom.us

Published

2025-11-13

Last modified

2026-10-07

Weaknesses

CWE-295

Affected products

• Meeting Software Development Kit (Zoom)
• Workplace Desktop (Zoom)
• Workplace Virtual Desktop Infrastructure (Zoom)
• Zoom Workplace Clients (Zoom Communications Inc.)

References

• https://www.zoom.com/en/trust/security-bulletin/zsb-25044