CVE-2025-67460 | THREATINT

Description

Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.

PUBLISHED Reserved 2025-12-08 | Published 2025-12-10 | Updated 2025-12-12 | Assigner Zoom

HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-693: Protection Mechanism Failure

Product status

Default status

unaffected

Any version before 6.6.0

affected

References

www.zoom.com/en/trust/security-bulletin/zsb-25050

cve.org (CVE-2025-67460)

nvd.nist.gov (CVE-2025-67460)

Download JSON