CVE-2025-67461

External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - security@zoom.us

Published

2025-12-10

Last modified

2025-12-10

Weaknesses

CWE-73

Affected products

• Rooms (Zoom)
• Zoom Rooms (Zoom Communications Inc.)

References

• https://www.zoom.com/en/trust/security-bulletin/zsb-25051