What is the CVSS score of CVE-2025-67460?

CVE-2025-67460 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Zoom Rooms are affected by CVE-2025-67460?

Zoom Rooms for Windows deployments running builds prior to 6.6.0 carry a locally exploitable privilege-escalation flaw that lets someone with existing low-level access bypass downgrade protection and…

How to fix or mitigate CVE-2025-67460?

Within 24 hours, inventory every Zoom Rooms for Windows endpoint and confirm the exact build in use; for any device below 6.6.0, restrict interactive and physical access to trusted staff only, and verify that non-administrative accounts cannot trigger a client downgrade or reinstall. Within 7 days, harden those endpoints by removing unnecessary local administrator rights from room and kiosk accounts, locking consoles into kiosk mode with physical security controls, applying application allowlisting so older client builds cannot be installed, and enabling monitoring for unexpected build changes, repeated client installations, or local privilege-escalation activity on room systems. Within 30 days, plan and schedule an upgrade to Zoom Rooms for Windows 6.6.0 or later - the first release outside the affected range - as soon as the vendor makes a fixed build generally available, and in the interim re-validate that no room endpoint retains downgrade paths permitted to low-privileged users.

Zoom Rooms CVE-2025-67460

HIGH

Protection Mechanism Failure (CWE-693)

2025-12-10 security@zoom.us

Windows Privilege Escalation Zoom Rooms

7.8

CVSS 3.1 · Vendor: zoom

Severity by source

Vendor (zoom) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local-only vector with low existing privilege forcing a vulnerable-version rollback for full local escalation; UI:N and full C/I/A impact align with an EoP outcome.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (zoom).

CVSS VectorVendor: zoom

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Metadata Corrected

Sep 26, 2026 - 00:40 vuln.today

tag: Windows added

Metadata Corrected

Sep 26, 2026 - 00:40 vuln.today

tag: Microsoft Zoom

Analysis Generated

Sep 25, 2026 - 23:52 vuln.today

CVE Published

Dec 10, 2025 - 21:16 cve.org

HIGH 7.8

DescriptionCVE.org

Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.

AnalysisAI

Local privilege escalation in Zoom Rooms for Windows before 6.6.0 allows an attacker with local access and low-level privileges (PR:L per CVSS vector) to bypass downgrade protection and install an older, vulnerable client build, escalating privileges. This protection mechanism failure (CWE-693) is a local, lower-urgency issue; no public exploit code or active exploitation has been identified at time of analysis, and EPSS is low at 0.16%.

Technical ContextAI

The vulnerability is a protection mechanism failure (CWE-693) in Zoom Rooms for Windows, specifically the software downgrade protection. Zoom Rooms is a conference room solution; the affected CPE is cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*, covering all Windows versions before 6.6.0. The flaw allows an attacker to revert to an older client build that may contain known vulnerabilities, bypassing the intended downgrade prevention. Exploitation requires local access (AV:L) and some existing privileges (PR:L), with high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). The independent assessment notes a contradiction: the description mentions 'unauthenticated user' while the CVSS vector indicates PR:L, which should be verified against Zoom's advisory.

RemediationAI

Upgrade to Zoom Rooms 6.6.0 or later (vendor-released patch: 6.6.0). See the Zoom advisory at https://www.zoom.com/en/trust/security-bulletin/zsb-25050. Compensating controls include restricting local access to trusted users, enabling application whitelisting to prevent unauthorized installation of older versions, and monitoring for downgrade attempts; these may reduce functionality for legitimate users and require administrative overhead.