Privilege Escalation in Zoom Rooms for Windows

Successful exploitation can allow a locally authenticated attacker to gain elevated privileges beyond those originally assigned to their account on the affected Windows host. This can enable compromise of the local Zoom Rooms environment and potentially broader control over the system, depending on the privileges obtained.

If immediate patching is not possible, reduce exposure by restricting local interactive access to Zoom Rooms systems to trusted administrators only, minimizing the number of authenticated users on affected hosts, enforcing least-privilege account assignments, and monitoring for unexpected privilege changes or suspicious local activity. Because exploitation requires local authenticated access, physical and local account access controls materially reduce risk until updates are applied.

Upgrade Zoom Rooms for Windows to version 7.1.0 or later. Applying the vendor-provided security update is the primary remediation. Organizations should ensure all affected Zoom Rooms for Windows installations are identified and updated promptly.