CVE-2025-62484

CRITICAL EPSS 16.9%

Published Nov 13, 20257mo ago · Modified Jun 17, 20261w ago

9.8 CVSS 3.1

Critical

Published Nov 13, 2025 7mo ago

Last Modified Jun 17, 2026 1w ago

Description

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS Details

Base Score

9.8

Exploitability

3.9

Impact

5.9

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

16.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-1333

Affected Products 4

Vendor	Product	Version	Range
zoom	meeting_software_development_kit	*	<6.5.10
zoom	meeting_software_development_kit	*	<6.5.10
zoom	workplace	*	<6.5.10
zoom	workplace	*	<6.5.10

References 1

zoom.com https://www.zoom.com/en/trust/security-bulletin/zsb-25048

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.