CVE-2025-62484
HIGHZoom Workplace Clients <6.5.10 - Privilege Escalation
Title source: llmDescription
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
References (1)
Core 1
Core References
Vendor Advisory
https://www.zoom.com/en/trust/security-bulletin/zsb-25048
Scores
CVSS v3
8.1
EPSS
0.0026
EPSS Percentile
16.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-1333
Status
published
Products (2)
zoom/meeting_software_development_kit
< 6.5.10 (2 CPE variants)
zoom/workplace
< 6.5.10 (2 CPE variants)
Published
Nov 13, 2025
Tracked Since
Feb 18, 2026