Zoom Rooms for macOS - External Control of File Name or Path
CVE-2025-67461

5MEDIUM

Key Information:

Vendor

Zoom
Status
Zoom Rooms
Vendor
CVE Published:
10 December 2025

What is CVE-2025-67461?

External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.

Affected Version(s)

Zoom Rooms MacOS 0 < 6.6.0

References

https://www.zoom.com/en/trust/security-bulletin/zsb-25051

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-67461 : Information Disclosure Vulnerability in Zoom Rooms for macOS