CVE-2025-67461CWE-73

CVE-2025-67461

Medium · published December 11, 2025

CVSS v3.1
5.0
EPSS
0%
Percentile
3.4
In the wild
Unconfirmed
What it is

External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00144 · 3.4th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2025-12-11T02:16Z
Affected products (1)
ProductVersionsFixed in
zoom/rooms< 6.6.06.6.0
References (1)
https://www.zoom.com/en/trust/security-bulletin/zsb-25051 · [email protected]
EPSS history
Timeline
  • 10 DEC 20:29Z
    Zoom Rooms for macOS - External Control of File Name or Path
    cvelistv5