CVE-2025-62484CWE-1333

CVE-2025-62484

High · published November 13, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

⚡ An unauthenticated user can exploit a sneaky regex flaw in Zoom Workplace Clients to escalate privileges—like someone finding a secret entrance to an exclusive party! 🎉 This vulnerability is like a poorly designed ticketing system that allows individuals to bypass the line and access VIP areas without proper verification—great for them, but a nightmare for security! If left unaddressed, an attacker can gain unauthorized access and elevate their privileges within the system, potentially leading to data leaks or unauthorized changes that could disrupt operations and compromise user data. This could be absolutely devastating for your organization!

Put simply

This vulnerability is like a poorly designed ticketing system that allows individuals to bypass the line and access VIP areas without proper verification—great for them, but a nightmare for security! The issue stems from inefficient regular expression complexity, which allows an attacker to exploit certain Zoom Workplace Clients before version 6.5.10, conducting an escalation of privilege simply through network access, without needing authentication.

What to do

If left unaddressed, an attacker can gain unauthorized access and elevate their privileges within the system, potentially leading to data leaks or unauthorized changes that could disrupt operations and compromise user data. This could be absolutely devastating for your organization! Upgrade your Zoom Workplace Clients immediately to version 6.5.10 or later to patch this vulnerability. Additionally, review your network access controls to ensure they are robust against unauthorized privilege escalation attempts. Regularly audit your systems for potential vulnerabilities like this! You've got this! Follow these steps, and you'll be securing your Zoom environment like a pro! 🛡️

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00322 · 24.0th percentile
Weakness
CWE-1333 · Inefficient Regular Expression Complexity
Published
2025-11-13T21:15Z
Affected products (4)
ProductVersionsFixed in
zoom/meeting_software_development_kit< 6.5.106.5.10
zoom/meeting_software_development_kit< 6.5.106.5.10
zoom/workplace< 6.5.106.5.10
zoom/workplace< 6.5.106.5.10
References (1)
EPSS history
Timeline
  • 13 NOV 15:07Z
    Zoom Workplace Clients - Inefficient Regular Expression Complexity
    cvelistv5