PT-2025-46839 · Zoom · Zoom Workplace Clients

Published 2025-11-13 · Updated 2025-12-05 · CVE-2025-62484

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoom Workplace Clients versions prior to 6.5.10

Description An inefficient regular expression complexity in certain Zoom Workplace Clients may allow an unauthenticated user to conduct an escalation of privilege via network access. The issue involves a flaw in regular expression processing.

Recommendations Update Zoom Workplace Clients to version 6.5.10 or later.

Fix

LPE

DoS

Weakness Enumeration

CWE-1333

Related Identifiers

CVE-2025-62484

Affected Products

Zoom Workplace Clients

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-62484 · Security Note
• https://zoom.com/en/trust/security-bulletin/zsb-25048 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-62484 · Vendor Advisory
• https://twitter.com/dailycve/status/1991240110898106853 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1989163908528042240 · Twitter Post
• https://twitter.com/transilienceai/status/1989174244421333182 · Twitter Post
• https://twitter.com/cracbot/status/1990736812520976607 · Twitter Post