Approved changes feed: RSS · Atom

cpe:2.3:a:zoom_communications_inc.:zoom_rooms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZoom Communications Inc. (95ff05b6-8f24-5e14-aa30-fd618b6afa04)
ProductZoom Rooms (337b11d1-e5af-53a4-a5e6-72ac7e7a7303)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-30901 vulnerable 2026-06-03 15:19:26.081389 Zoom Rooms for Windows - Improper Input Validation
HIGH (7)
Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.
Published: 2026-03-11T14:47:42.729Z
Updated: 2026-03-12T03:55:32.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67461 vulnerable 2026-06-03 15:11:01.573562 Zoom Rooms for macOS - External Control of File Name or Path
MEDIUM (5)
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.
Published: 2025-12-10T20:29:36.221Z
Updated: 2025-12-10T21:27:08.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67460 vulnerable 2026-06-03 15:11:01.572252 Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure
HIGH (7.8)
Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.
Published: 2025-12-10T20:37:03.144Z
Updated: 2026-02-26T16:21:05.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58133 vulnerable 2026-06-03 15:06:20.750555 Zoom Rooms Clients - Authentication Bypass
MEDIUM (5.3)
Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.
Published: 2025-10-15T16:13:28.273Z
Updated: 2025-11-13T14:01:37.953Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.