Zoom Rooms for Windows and macOS Vulnerabilities Triggers Local users with unauthorized File Access

EXECUTIVE SUMMARY:

A pair of serious vulnerabilities have been discovered in Zoom Rooms on Windows and macOS, affecting all installations prior to version. On Windows, a flaw in the downgrade‑protection mechanism can be abused by a local user to escalate privileges potentially granting system‑level control over the machine. On macOS, a separate vulnerability allows an authenticated local user to influence file‑name or path handling, enabling disclosure of sensitive data. In environments such as shared conference rooms or corporate devices where multiple users may have local access these vulnerabilities pose a risk of unauthorized access, data leakage, or insider compromise. It is using Zoom Rooms should immediately update to the patched version and audit access controls, enforce least‑privilege policies, and monitor unusual file operations or downgrade attempts.