CVE-2025-58131

—

CVSS 3.1

6.6 medium

EPSS

<1%p1

Published

Sep 9, 2025 (Sep 9, 2025)

Modified

Jun 17, 2026

Description

Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or before 6.2.15 and 6.3.12 in their respective tracks) may allow an authenticated user to conduct a disclosure of information via network access.

Weakness: CWE-367
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.