Zoom Improper Certificate Validation Vulnerability Allowing Information Disclosure
Vulnerability
A vulnerability exists in certain Zoom Clients due to improper certificate validation. This issue may enable an unauthenticated user to disclose information through adjacent access. The vulnerability affects Zoom Workplace for Windows, Linux, and VDI Clients, as well as the Zoom Meeting SDK for Windows and Linux, all prior to version 6.5.10.
Impact
Exploitation of this vulnerability could lead to unauthorized information disclosure.
Remediation
Users are advised to update to the latest version of Zoom. The latest version can be downloaded from the Zoom Download Center.
Added: Nov 13, 2025, 3:28 PM
Updated: Nov 13, 2025, 3:28 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
4.9remediation
7.7relevance
1.1threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.