CVE-2025-62483
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
Risk Assessment
The risk is the possibility of sensitive data leakage, which could compromise the confidentiality of organizational or user information.
Recommendation
It is recommended to update Zoom Clients to version 6.5.10 or later to eliminate the vulnerability.
Other vulnerabilities in Zoom Clients
See all- CVE-2026-53413High
Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.
- CVE-2026-53415High
Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access.
- CVE-2026-53414Medium
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.
- CVE-2025-30669Medium
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
- CVE-2023-39218Medium
In Zoom clients before version 5.14.10, there is a client-side enforcement issue of server-side security that may allow a privileged user to enable information disclosure via network access.
- CVE-2023-36535High
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.
- CVE-2023-36532Medium
Buffer overflow in Zoom Clients before version 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.
Original NVD description (English source)
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS