Vulnerability · Published Nov 13, 2025 · Assigned by Zoom
CVE-2025-62484Zoom Workplace Clients - Inefficient Regular Expression Complexity
High 8.1
In plain English
A high-severity regular-expression denial of service in Zoom Workplace from Zoom Communications Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.3%top 74.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Zoom Communications Inc. | Zoom Workplace | 0 – before 6.5.10 |
Weakness: CWE-1333 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N