CVE-2025-67460 HIGH

CVE-2025-67460: Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure

Vendor Zoom Communications Inc.

Product Zoom Rooms

Weakness CWE-693

Published December 10, 2025

Last update February 26, 2026

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.

Key dates

02Disclosure timeline

December 10, 2025 CVE published

February 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-67460 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/693.html

Related vulnerabilities

04Related CVE

CVE-2026-48570 Secure Boot Security Feature Bypass Vulnerability CVE-2026-13601 Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications CVE-2026-40604 ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement CVE-2024-56181 CVE-2025-12094 OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) <= 1.2.53 - Unauthenticated IP Header Spoofing