CVE-2025-64740: Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature
Published Nov 13, 2025
·Updated
Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
Affected Software
3 affected components
Zoom Workplace VDI Client for Windows
Zoom Workplace Virtual Desktop Infrastructure Windows<6.3.14
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.4.10<6.4.12
Event History
Nov 13, 2025
CVE Published
via MITRE·02:35 PM
Data Sourced
via MITRE·02:35 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-64740?
CVE-2025-64740 is classified as a high severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2025-64740?
To fix CVE-2025-64740, update the Zoom Workplace VDI Client for Windows to the latest version provided by Zoom.
3
Who is affected by CVE-2025-64740?
CVE-2025-64740 affects authenticated users of the Zoom Workplace VDI Client for Windows.
4
What type of vulnerability is CVE-2025-64740?
CVE-2025-64740 is an improper verification of cryptographic signature vulnerability.
5
What could happen if CVE-2025-64740 is exploited?
If exploited, CVE-2025-64740 could allow an authenticated user to escalate their privileges on the system.