CVE-2026-53409
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Improper privilege management in Zoom Rooms for Windows before version 7.1.0 allows an authenticated user to escalate privileges via local access.
Risk Assessment
The organization faces the risk of privilege escalation by an authenticated user, potentially leading to system compromise or unauthorized access to sensitive data.
Recommendation
Immediately update Zoom Rooms for Windows to version 7.1.0 or later, which includes a fix for this vulnerability.
Other vulnerabilities in Zoom Rooms
See all- CVE-2025-67461Medium
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to disclose information via local access.
- CVE-2025-67460High
A protection mechanism failure of software downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.
Original NVD description (English source)
Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS