How severe is CVE-2025-58131?

Medium severity. CVSS v3 base score is 6.6 out of 10.

Vulnerability in Zoom Communications, Inc Workplace Vdi Plugin Macos Universal Installer For Vmware Horizon

CVE-2025-58131

Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or before 6.2.15 and 6.3.12 in their respective tracks) may allow an authenticated user to conduct a disclosure of informat…

Vulnerability class: TOCTOU (Time-of-Check to Time-of-Use)

EPSS: 0.001 (1.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N.

Affected products

Zoom Communications, Inc Workplace Vdi Plugin Macos Universal Installer For Vmware Horizon — versions 0

Weakness classification (CWE)

CWE-367 — Time-of-check Time-of-use (TOCTOU) Race Condition

References

security@zoom.us

Frequently asked questions

What is CVE-2025-58131?: CVE-2025-58131 is a medium-severity vulnerability in Zoom Communications, Inc Workplace Vdi Plugin Macos Universal Installer For Vmware Horizon, classified under Time-of-check Time-of-use (TOCTOU) Race Condition. CVSS score: 6.6/10. Published 2025-09-09.
How severe is CVE-2025-58131?: Medium severity. CVSS v3 base score is 6.6 out of 10.