# CVE-2025-64741: Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user…

Source: https://junglewise.ai/threats/cve-2025-64741-improper-authorization-handling-in-zoom-workplace-for-android  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-13  
License: CC BY 4.0 with a link back

CVE-2025-64741 · Severity: high · CVSS 8.1 · Published 2025-11-13

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Technologies: [Zoom Meeting Software Development Kit](https://junglewise.ai/threats/technologies/meeting-software-development-kit), [Zoom Workplace](https://junglewise.ai/threats/technologies/workplace). Vendors: [Zoom](https://junglewise.ai/threats/vendors/zoom).

## Quick answers

**Is CVE-2025-64741 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-64741 being exploited in the wild.

**How severe is CVE-2025-64741?** High severity, with a CVSS score of 8.1, published 13 November 2025.

**Which products and versions are affected?** Zoom Meeting Software Development Kit, Zoom Workplace. The advisory does not name versions.

**Is there a fix for CVE-2025-64741?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-64741?** Check whether you run Zoom Meeting Software Development Kit or Zoom Workplace. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Zoom Meeting Software Development Kit
- Zoom Workplace

## Related threats

- [Zoom Clients use-after-free in annotator function](https://junglewise.ai/threats/cve-2026-53415-zoom-clients-use-after-free-in-annotator-function)
- [Zoom Workplace for Windows improper input validation account takeover](https://junglewise.ai/threats/cve-2026-53412-zoom-workplace-for-windows-improper-input-validation-account)
- [Zoom Workplace improper authorization in custom URL scheme handler](https://junglewise.ai/threats/cve-2026-53408-zoom-workplace-improper-authorization-in-custom-url-scheme)
- [Zoom Workplace improper authorization in custom URL scheme handler](https://junglewise.ai/threats/cve-2026-53407-zoom-workplace-improper-authorization-in-custom-url-scheme)
- [Zoom Workplace for iOS protection mechanism failure](https://junglewise.ai/threats/cve-2026-30904-zoom-workplace-for-ios-protection-mechanism-failure)