CVE-2025-62483
MEDIUMDescription
Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
Is your site exposed to CVE-2025-62483?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| zoom | meeting_software_development_kit |
| zoom | meeting_software_development_kit |
| zoom | meeting_software_development_kit |
| zoom | rooms |
| zoom | rooms |
| zoom | rooms |
| zoom | rooms_controller |
| zoom | rooms_controller |
| zoom | rooms_controller |
| zoom | workplace_desktop |
| zoom | workplace_desktop |
| zoom | workplace_desktop |
| zoom | workplace_virtual_desktop_infrastructure |
| zoom | workplace_virtual_desktop_infrastructure |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-62483? +
How severe is CVE-2025-62483? +
What products are affected by CVE-2025-62483? +
How do I check if I'm vulnerable to CVE-2025-62483? +
Related Vulnerabilities
Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions …
kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used …
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to …
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or …
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.