What’s Vulnerable › Vulnerabilities
CVE-2025-58131: Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race Condition
- Severity: medium (CVSS 6.6 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-09-09 · updated 2026-06-17
- Weakness: CWE-367
Description
Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or before 6.2.15 and 6.3.12 in their respective tracks) may allow an authenticated user to conduct a disclosure of information via network access.
Affected products
- Zoom Communications, Inc Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon: before see references — fixed in see references
How to fix
Upgrade to a fixed version: Zoom Communications, Inc Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon see references. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-58131 or the next vulnerability affects your stack