PatchTheCVErooms controller vulnerabilities and fixes
Recent CVEs affecting rooms controller, with upgrade or downgrade steps. 13 tracked.
Also searched as: roomscontroller.
rooms controller has 13 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 13. Most recent: 2025-09-09. Highest priority: CVE-2025-49457 (score 46/100).
- CVE-2025-58135 MEDIUM 5.3 UPGRADE UPGRADE Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to
- CVE-2025-58134 MEDIUM 4.3 UPGRADE UPGRADE Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to condu
- CVE-2025-49457 CRITICAL 9.6 UPGRADE UPGRADE Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an esca
- CVE-2025-49456 MEDIUM 6.2 UPGRADE UPGRADE Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impa
- CVE-2025-46785 MEDIUM 6.5 UPGRADE UPGRADE Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial o
- CVE-2025-30671 MEDIUM 6.5 UPGRADE UPGRADE Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a
- CVE-2025-30670 MEDIUM 6.5 UPGRADE UPGRADE Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a
- CVE-2025-30666 MEDIUM 6.5 UPGRADE UPGRADE NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a
- CVE-2025-30665 MEDIUM 6.5 UPGRADE UPGRADE NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a
- CVE-2025-27443 LOW 2.8 UPGRADE UPGRADE Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated us
- CVE-2025-0146 LOW 3.9 UPGRADE UPGRADE Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated u
- CVE-2025-0145 MEDIUM 4.6 UPGRADE UPGRADE Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user t
- CVE-2024-45426 MEDIUM 4.9 UPGRADE UPGRADE Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an informati
FAQ
How do I fix rooms controller vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rooms controller being exploited right now?
None of the tracked rooms controller CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rooms controller CVE should I patch first?
CVE-2025-49457 currently ranks highest (46/100): Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an esca.