#VU114992 Improper authorization in Zoom Video Communications, Inc. products - CVE-2025-58134
Published: September 9, 2025
Vulnerability identifier: #VU114992
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2025-58134
CWE-ID: CWE-285
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Zoom Workplace Desktop App for Windows
Zoom Rooms Controller for Windows
Zoom Rooms Client for Windows
Virtual Desktop Infrastructure (VDI)
Zoom Meeting SDK for Windows
Zoom Workplace Desktop App for Windows
Zoom Rooms Controller for Windows
Zoom Rooms Client for Windows
Virtual Desktop Infrastructure (VDI)
Zoom Meeting SDK for Windows
Software vendor:
Zoom Video Communications, Inc.
Zoom Video Communications, Inc.
Description
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to incorrect authorization checks. A remote attacker can trick the victim into performing certain actions and manipulate application's data.
Remediation
Install updates from vendor's website.