Known vulnerabilities in Zoom Workplace Desktop App for macOS 6.4.3 52139

Vendor: Zoom Video Communications, Inc.
Software: Zoom Workplace Desktop App for macOS
Version: 6.4.3 52139
Software CPE: cpe:2.3:a:zoom_video_communications:zoom_client_for_macos:*:*:*:*:*:*:*:*
Website: https://zoom.us/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoom Workplace Desktop App for macOS version 6.4.3 52139 Zoom Workplace Desktop App for macOS 6.4.3 52139 is affected by 8 vulnerabilities: 4 medium, 4 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-62483		 CWE-200 Medium
No
No
 6.5.10 62715 11.11.2025 SB2025111124
#VU118245 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-64739		 CWE-22 Medium
No
No
 6.5.10 62715 11.11.2025 SB2025111118
#VU118244 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-64738		 CWE-22 Low
No
No
 6.5.10 62715 11.11.2025 SB2025111117
#VU114991 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49461		 CWE-79 Low
No
No
 6.5.0 57940 09.09.2025 SB2025090906
#VU114990 - Argument Injection or Modification
CVE-2025-49460		 CWE-88 Medium
No
No
 6.5.0 57940 09.09.2025 SB2025090905
#VU114988 - Memory corruption
CVE-2025-49458		 CWE-119 Low
No
No
 6.5.0 57940 09.09.2025 SB2025090903
#VU112523 - Improper Authentication
CVE-2025-49464		 CWE-287 Low
No
No
 6.4.5 53616 08.07.2025 SB2025070865
#VU112512 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49462		 CWE-79 Medium
No
No
 6.4.5 53616 08.07.2025 SB2025070855