by Kastro
Paper/Archive/CVE-2025-62484

CVE-2025-62484

Zoom Communications Inc. Zoom Workplace — Zoom Workplace Clients - Inefficient Regular Expression Complexity

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
34
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 25.2.252 × 205.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Affected

ProductAffectedFixed inSource
Zoom Workplace< 6.5.106.5.10CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Zoom (CNA)8.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refzoom.com/en/trust/security-bulletin/zsb-25048