External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.zoom.com/en/trust/security-bulletin/zsb-25040 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · zoomNVD modified 2026-10-18 20:10
Affected (CPE criteria) 2
cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*
References 1
- https://www.zoom.com/en/trust/security-bulletin/zsb-25040 Vendor Advisory