Zoom Rooms on Windows and macOS Exposed to Privilege Escalation and Data Leakage Flaws
Cybersecurity: Zoom Security Patches Released Zoom has issued security patches to address two critical vulnerabilities affecting Zoom Rooms on Windows and macOS platforms. Vulnerability Details The vulnerabilities pose risks of privilege escalation attacks and unauthorized software manipulation, necessitating immediate updates…

Cybersecurity: Zoom Security Patches Released
Zoom has issued security patches to address two critical vulnerabilities affecting Zoom Rooms on Windows and macOS platforms.
Vulnerability Details
The vulnerabilities pose risks of privilege escalation attacks and unauthorized software manipulation, necessitating immediate updates in enterprise environments.
- CVE-2025-67460: Affects Zoom Rooms for Windows with a High severity rating. The issue arises from a failure in the software downgrade protection mechanism, allowing potential manipulation or downgrading to vulnerable software versions.
- CVE-2025-67461: Affects Zoom Rooms for macOS with a Medium severity rating. This flaw involves external control of file name or path functionality, enabling possible manipulation of file operations and access to sensitive data.
These vulnerabilities were disclosed on December 9, 2025, and may be subject to active exploitation. Zoom has not disclosed specific impacts on individual customers or comprehensive assessments but recommends all users update to the latest software version for security enhancements.
Zoom has issued security patches to address two critical vulnerabilities affecting Zoom Rooms on Windows and macOS platforms.
Recommendations
Organizations utilizing Zoom Rooms should prioritize patching to prevent potential security breaches. Security teams are advised to audit configurations and deployment versions to align with current security standards.
Zoom underlines the importance of maintaining updated software to ensure robust security, especially where Zoom Rooms are integral to business communications.
For more information, visit the Zoom Security Bulletin.




