CVE-2025-62484

CriticalCVSS 9.8/10Last modified Oct 7, 2026

Description

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1333

Affected software

No affected versions have been published.

Timeline

Published: Nov 13, 2025
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-624873.5On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the prop CVE-2025-62496.7An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with elevated permissions CVE-2025-624908.8In quickjs, in js_print_object, when printing an array, the function first fetches the array length and then loops over it. The issue is, pr CVE-2025-624918.8A Use-After-Free (UAF) vulnerability exists in the QuickJS engine's standard library when iterating over the global list of unhandled reject CVE-2025-624926.5A vulnerability stemming from floating-point arithmetic precision errors exists in the QuickJS engine's implementation of TypedArray.prototy CVE-2025-624936.5A vulnerability exists in the QuickJS engine's BigInt string conversion logic (js_bigint_to_string1) due to an incorrect calculation of the CVE-2025-624948.8A type confusion vulnerability exists in the handling of the string addition (+) operation within the QuickJS engine. * The code first c CVE-2025-624958.8An integer overflow vulnerability exists in the QuickJS regular expression engine (libregexp) due to an inconsistent representation of the b CVE-2025-624968.8A vulnerability exists in the QuickJS engine's BigInt string parsing logic (js_bigint_from_string) when attempting to create a BigInt from a CVE-2025-624976.5Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage wh CVE-2025-624988.8A relative path traversal (ZipSlip) vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows CVE-2025-624994.6Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an