CVE-2025-58131

Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race Condition

State: Published
Severity: 6.6 Medium
Published: Sep 9, 2025
Updated: Sep 10, 2025
Reserved: Aug 25, 2025

Description

Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or before 6.2.15 and 6.3.12 in their respective tracks) may allow an authenticated user to conduct a disclosure of information via network access.

Scores

CVSS	Score	Vector	Source
3.1	6.6 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N	Zoom

Weaknesses

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

Affected Products

Product	Versions
Zoom Workplace VDI Plugin macOS Universal installer for VMware HorizonZoom Communications, Inc	before see referencesAffected

References

https://www.zoom.com/en/trust/security-bulletin/ZSB-25037

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.