CVE-2025-58133: 
Zoom Client vulnerability analysis and mitigation

Authentication bypass vulnerability (CVE-2025-58133) was discovered in Zoom Rooms Clients before version 6.5.1. The vulnerability was disclosed on October 14, 2025, affecting multiple platforms including Windows, macOS, Android, iOS, and iPad versions of Zoom Rooms. This security issue allows an unauthenticated user to potentially access sensitive information through network access (Zoom Security Bulletin).

The vulnerability has been assigned a CVSS v3.1 base score of 5.3 (Medium severity) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N. This indicates that the vulnerability requires network access, has high attack complexity, needs no privileges, requires user interaction, has unchanged scope, and can potentially lead to high confidentiality impact without affecting integrity or availability (NVD).

The vulnerability primarily affects the confidentiality of information, potentially allowing unauthorized disclosure of sensitive data. The CVSS metrics indicate high confidentiality impact (C:H) while maintaining no impact on system integrity (I:N) or availability (A:N) (NVD).

Zoom has released version 6.5.1 to address this vulnerability. Users are advised to update their Zoom Rooms Clients to the latest version available at zoom.us/download. This update is available for all affected platforms including Windows, macOS, Android, iOS, and iPad (Zoom Security Bulletin).