CVE-2025-67460
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A protection mechanism failure of software downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.
Risk Assessment
A person with local access could exploit this vulnerability to gain elevated privileges, potentially leading to unauthorized actions on the system.
Recommendation
Update Zoom Rooms for Windows to version 6.6.0 or later. Restrict local access to devices with Zoom Rooms installed.
Other vulnerabilities in Zoom Rooms
See all- CVE-2026-53409High
Improper privilege management in Zoom Rooms for Windows before version 7.1.0 allows an authenticated user to escalate privileges via local access.
- CVE-2025-67461Medium
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to disclose information via local access.
Original NVD description (English source)
Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS