CVE-2025-62484
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
Risk Assessment
The risk of privilege escalation by an unauthenticated user could lead to unauthorized access to sensitive functions and data within the organization.
Recommendation
It is recommended to immediately update Zoom Workplace Clients to version 6.5.10 or later to mitigate the vulnerability.
Other vulnerabilities in Zoom Workplace
See all- CVE-2026-53408High
In Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS, improper authorization in the handler for custom URL scheme may allow an unauthenticated user to conduct an escalation of privilege via network access.
- CVE-2025-62482Medium
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
Original NVD description (English source)
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS