CVE-2025-58131

medium

Description

Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or before 6.2.15 and 6.3.12 in their respective tracks) may allow an authenticated user to conduct a disclosure of information via network access.

References

https://www.zoom.com/en/trust/security-bulletin/ZSB-25037

Details

Source: Mitre, NVD

Published: 2025-09-09

Updated: 2026-04-15

Risk Information

CVSS v2

Base Score: 6.2

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:N

Severity: Medium

CVSS v3

Base Score: 6.6

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Severity: Medium

EPSS

EPSS: 0.00011