Description
Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zoom Communications | Zoom Workplace VDI Plugin macOS Universal installer | see references | — |
Advisories 2
- NCSC-2025-0368 Kwetsbaarheden verholpen in Zoom Workplace en Zoom Clients NCSC-NL (Netherlands) · Nov 18, 2025
- WID-SEC-2025-2541 Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 13, 2025