CVE-2025-67460

HIGH

Zoom Rooms for Windows <6.6.0 - Privilege Escalation

Title source: llm

Description

Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.

References (1)

[Vendor Advisory] https://www.zoom.com/en/trust/security-bulletin/zsb-25050

Scores

CVSS v3 7.8

EPSS 0.0005

EPSS Percentile 15.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-693

Status published

Affected Products (1)

zoom/rooms < 6.6.0

Timeline

Published Dec 10, 2025

Tracked Since Feb 18, 2026