Zoom Client Privilege Escalation via Element Neutralization (CVE-2025-30664)

Critical Vulnerability Information Advisory Number: ZSB-25017 CVE ID: CVE-2025-30664 CVSS Severity: Medium CVSS Score: 6.6 CVSS Vector String: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Description Improper neutralization of special elements in certain Zoom Workplace applications may allow an authenticated user with local access to perform privilege escalation. Affected Products Zoom Workplace Desktop App for Windows versions prior to 6.4.0 Zoom Workplace Desktop App for macOS versions prior to 6.4.0 Zoom Workplace Desktop App for Linux versions prior to 6.4.0 Zoom Workplace App for iOS versions prior to 6.4.0 Zoom Workplace App for Android versions prior to 6.4.0 Zoom Workplace VDI Client for Windows versions prior to 6.3.10 Zoom Rooms Controller for Windows versions prior to 6.4.0 Zoom Rooms Controller for macOS versions prior to 6.4.0 Zoom Rooms Controller for Linux versions prior to 6.4.0 Zoom Rooms Controller for Android versions prior to 6.4.0 Zoom Rooms Client for Windows versions prior to 6.4.0 Zoom Rooms Client for macOS versions prior to 6.4.0 Zoom Rooms Client for Android versions prior to 6.4.0 Zoom Rooms Client for iPad versions prior to 6.4.0 Zoom Meeting SDK for Windows versions prior to 6.4.0 Zoom Meeting SDK for iOS versions prior to 6.4.0 Zoom Meeting SDK for Android versions prior to 6.4.0 Zoom Meeting SDK for macOS versions prior to 6.4.0 Zoom Meeting SDK for Linux versions prior to 6.4.0 Source Reported by the Zoom Engineering Security Team. Revision History Version: 1.0 Date: May 13, 2025 Description: Initial release.

Goal Reached Thanks to every supporter — we hit 100%!

Zoom Client Privilege Escalation via Element Neutralization (CVE-2025-30664)