CVE-2025-62484

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Scoring

Severity

HIGH

CVSS base score

8.1

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS probability

0.30%

CWE

CWE-1333

Published

2025-11-13

Last modified

2026-03-12

Affected products

• Zoom Communications Inc. Zoom Workplace

Weakness type

• CWE-1333

Related vulnerabilities

• CVE-2026-75880 — Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service
• CVE-2026-87819 — GitPython before 3.1.60 Denial of Service via ReDoS
• CVE-2026-86081 — n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
• CVE-2026-85062 — Colord: Slow rejection of oversized malformed color strings
• CVE-2026-83619 — xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser
• CVE-2026-83606 — xmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructions
• CVE-2024-58379 — nodemailer before 6.9.9 ReDoS via attachDataUrls parameter
• CVE-2026-55520 — Protego: Exponential backtracking ReDoS in robots.txt URL wildcard matching

Markdown version · Browse all CVEs