Information disclosure in Zoom Video Communications, Inc. products - CVE-2025-62483

Vulnerability identifier: #VU118251

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-62483

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A remote attacker can gain unauthorized access to sensitive information.

Zoom Workplace Desktop App for Windows
Zoom Rooms Client for macOS
Zoom Rooms Client for Windows
Zoom Workplace Desktop App for macOS
Zoom Workplace Desktop App for Linux
Zoom Rooms Controller for Linux
Zoom Rooms Controller for Windows
Zoom Rooms Controller for macOS
Zoom Meeting SDK for macOS
Zoom Meeting SDK for Windows
Zoom Meeting SDK for Linux
Zoom Rooms Client for iPad
Virtual Desktop Infrastructure (VDI)

Install updates from vendor's website.

Zoom Workplace Desktop App for Windows - update to 6.5.10 12704
Zoom Rooms Client for macOS - update to 6.5.10
Zoom Rooms Client for Windows - update to 6.5.10
Zoom Workplace Desktop App for macOS - update to 6.5.10 62715
Zoom Workplace Desktop App for Linux - update to 6.5.10 3973
Zoom Meeting SDK for macOS - update to 6.5.10
Zoom Meeting SDK for Windows - update to 6.5.10
Zoom Meeting SDK for Linux - update to 6.5.10
Zoom Rooms Client for iPad - update to 6.5.10
Zoom Rooms Controller for Linux - update to 6.5.10
Zoom Rooms Controller for Windows - update to 6.5.10
Zoom Rooms Controller for macOS - update to 6.5.10
Virtual Desktop Infrastructure (VDI) - addressed in versions 6.3.14.26600, 6.4.12.26620, 6.5.10.26710

• https://www.zoom.com/en/trust/security-bulletin/ZSB-25047/

• Information disclosure in Zoom clients