A critical vulnerability in Zoom Workplace allows unauthenticated users to perform privilege escalation, posing a significant risk to organizational endpoint security.

The software contains a vulnerability due to inefficient regular expression complexity (CWE-1333), which can be triggered by an unauthenticated attacker to achieve an escalation of privilege through network access.

The ability for an unauthenticated attacker to escalate privileges presents a severe security risk, potentially allowing unauthorized access to sensitive user data or system functions within the Zoom environment. With a CVSS score of 8.1, this vulnerability is classified as High, indicating that successful exploitation could lead to significant compromise of confidentiality and integrity for affected endpoints.

Immediate Action: Update all Zoom Workplace clients to version 6.5.10 or later immediately to resolve the identified regular expression complexity flaw.

Proactive Monitoring: Monitor network traffic for unusual patterns or spikes in resource utilization that may indicate an attempt to trigger inefficient regular expressions.

Compensating Controls: Ensure that endpoint security software and firewalls are configured to block suspicious inbound network connections to the Zoom client application where possible.

Public Exploit Available: Unknown.

Given the potential for privilege escalation, organizations must prioritize the deployment of the 6.5.10 update across all managed Zoom Workplace instances. Security teams should verify that automatic update mechanisms are functioning correctly to ensure rapid remediation and reduce the window of exposure to potential attackers.