cbcvebase.
CVE-2025-64741
published 2025-11-13

CVE-2025-64741: Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via…

PriorityP260critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.41%
32.5th percentile
Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Affected

3 ranges
VendorProductVersion rangeFixed in
zoommeeting_software_development_kit< 6.5.106.5.10
zoomworkplace< 6.5.106.5.10
zoom_communications_inczoom_workplace_for_android< 6.5.106.5.10
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.