CVE-2025-30663: Zoom Workplace Apps - Time-of-check Time-of-use
Published May 14, 2025
·Updated
Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
Affected Software
22 affected components
Zoom Workplace Apps
Zoom Meeting Software Development Kit Android<6.4.0
Zoom Meeting Software Development Kit Iphone Os<6.4.0
Zoom Meeting Software Development Kit Linux<6.4.0
Zoom Meeting Software Development Kit Macos<6.4.0
Zoom Meeting Software Development Kit Windows<6.4.0
Zoom Rooms Android<6.4.0
Zoom Rooms Ipados<6.4.0
Zoom Rooms Macos<6.4.0
Zoom Rooms Windows<6.4.0
Zoom Rooms Controller Android<6.4.0
Zoom Rooms Controller Linux<6.4.0
Zoom Rooms Controller Macos<6.4.0
Zoom Rooms Controller Windows<6.4.0
Zoom Workplace Android<6.4.0
Zoom Workplace Iphone Os<6.4.0
Zoom Workplace Desktop Linux<6.4.0
Zoom Workplace Desktop Macos<6.4.0
Zoom Workplace Desktop Windows<6.4.0
Zoom Workplace Virtual Desktop Infrastructure Windows<6.1.17
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.1.18<6.2.13
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.2.14<6.3.10
Event History
May 14, 2025
CVE Published
via MITRE·05:31 PM
Data Sourced
via MITRE·05:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-30663?
CVE-2025-30663 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2025-30663?
To fix CVE-2025-30663, users should update their Zoom Workplace Apps to the latest version provided by Zoom.
3
What type of vulnerability is CVE-2025-30663?
CVE-2025-30663 is a time-of-check time-of-use race condition vulnerability.
4
Who is affected by CVE-2025-30663?
CVE-2025-30663 affects authenticated users of Zoom Workplace Apps with local access.
5
What can an attacker do with CVE-2025-30663?
An attacker could exploit CVE-2025-30663 to escalate privileges on the affected system.