Zoom Rooms for Windows and macOS Flaws Enable Privilege Escalation and Sensitive Data Leaks

Zoom disclosed two vulnerabilities in Zoom Rooms for Windows and macOS prior to version 6.6.0: a Windows software downgrade protection bypass (ZSB-25050 / CVE-2025-67460) enabling local privilege escalation (CVSS 7.8) and a macOS file path/name control issue (ZSB-25051 / CVE-2025-67461) that can disclose sensitive information (CVSS 5.0). Both require local access, there is no evidence of active exploitation, and Zoom recommends updating to 6.6.0 or later while enterprises should audit deployments and enforce least-privilege controls.