{"id":"CVE-2025-30662","aliases":["EUVD-2025-175306","GHSA-cgp3-9h2x-r5v8"],"status":"published","title":"Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following","description":"Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.","severity":{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00138,"percentile":0.03257,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-646"],"published":"2025-11-13T14:53:09Z","modified":"2026-10-07T21:10:00Z","products":[{"vendor":"zoom","product":"workplace_virtual_desktop_infrastructure"},{"vendor":"zoom communications inc.","product":"zoom workplace vdi plugin macos universal installer"}],"references":[{"url":"https://www.zoom.com/en/trust/security-bulletin/zsb-25045","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30662"},{"url":"https://github.com/advisories/GHSA-cgp3-9h2x-r5v8"}],"sources":{"cve":[{"id":"CVE-2025-30662","title":"Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following","description":"Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.","status":"published","published":"2025-11-13T14:53:09.801Z","modified":"2026-02-26T16:57:05.216Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-646"],"updated_at":"2026-11-02T14:32:35.418416Z"}],"euvd":[{"id":"EUVD-2025-175306","description":"Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.","status":"published","published":"2025-11-13T14:53:09Z","modified":"2026-02-26T16:57:05Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T19:48:25.204929Z"}],"ghsa":[{"id":"GHSA-cgp3-9h2x-r5v8","title":"Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer...","description":"Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.","status":"published","published":"2025-11-13T15:30:31Z","modified":"2025-11-13T15:30:38Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"cwes":["CWE-646"],"updated_at":"2026-11-02T15:04:47.510067Z"}],"nvd":[{"id":"CVE-2025-30662","description":"Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.","status":"published","published":"2025-11-13T15:15:51.07Z","modified":"2026-10-07T21:10:00.2Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-646"],"updated_at":"2026-11-02T14:11:43.650381Z"}]}}