CVE-2025-62484

Published: Nov 13, 2025Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Affected (4)

Products: Zoom: Meeting Software Development Kit, Workplace

Zoom

2 products

Meeting Software Development Kit

Workplace

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Software Development Kit	Before 6.5.10
Zoom Meeting Software Development Kit	Before 6.5.10
Zoom Workplace	Before 6.5.10
Zoom Workplace	Before 6.5.10

Related CWEs

CWE-1333

Inefficient Regular Expression Complexity

The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-25048

Source: security@zoom.us

Vendor Advisory

Timeline

No history available yet.