Improper Authentication in Zoom Video Communications, Inc. products - CVE-2025-49464
Published: July 8, 2025
Vulnerability identifier: #VU112523
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-49464
CWE-ID: CWE-287
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to improper authentication in certain Zoom Clients for macOS. A remote attacker can impact application integrity.
Affected software
Zoom Rooms Client for macOS
Zoom Workplace Desktop App for macOS
Zoom Rooms Controller for macOS
Zoom Meeting SDK for macOS
Zoom Workplace Desktop App for macOS
Zoom Rooms Controller for macOS
Zoom Meeting SDK for macOS
How to mitigate CVE-2025-49464
Install updates from vendor's website.
Zoom Rooms Client for macOS - update to 6.4.5
Zoom Workplace Desktop App for macOS - update to 6.4.5 53616
Zoom Meeting SDK for macOS - update to 6.4.5
Zoom Rooms Controller for macOS - update to 6.4.5
Zoom Workplace Desktop App for macOS - update to 6.4.5 53616
Zoom Meeting SDK for macOS - update to 6.4.5
Zoom Rooms Controller for macOS - update to 6.4.5