Zoom Workplace Client <=6.5.9 Inefficient RE Allows Escalation via Network
CVE-2025-62484 Published on November 13, 2025
Zoom Workplace Clients - Inefficient Regular Expression Complexity
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
Vulnerability Analysis
CVE-2025-62484 is exploitable with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Weakness Type
What is a ReDoS Vulnerability?
The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles. Some regular expression engines have a feature called "backtracking". If the token cannot match, the engine "backtracks" to a position that may result in a different token that can match. Backtracking becomes a weakness if all of these conditions are met:
CVE-2025-62484 has been classified to as a ReDoS vulnerability or weakness.
Products Associated with CVE-2025-62484
Want to know whenever a new CVE is published for Zoom Workplace? stack.watch will email you.
Affected Versions
Zoom Communications Inc. Zoom Workplace:- Before 6.5.10 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.