An improper privilege management flaw in Zoom Rooms for Windows could allow an authenticated local user to escalate privileges and impact system integrity.

The application suffers from improper privilege management, which allows an authenticated local user to interact with the software in a way that bypasses intended security controls. This flaw potentially grants the user capabilities beyond their authorized level.

The CVSS score of 7.8 reflects the high severity of allowing local privilege escalation, which can lead to total loss of confidentiality, integrity, and availability on the affected host. Such vulnerabilities are commonly used to move laterally or establish persistence within an environment.

Immediate Action: Update Zoom Rooms for Windows to version 7.1.0 or later to ensure proper privilege management.

Proactive Monitoring: Audit local system logs for unexpected privilege changes or unauthorized execution of administrative tasks by standard user accounts.

Compensating Controls: Implement strict application control policies to ensure that only authorized users can interact with sensitive binary files associated with Zoom Rooms.

Public Exploit Available: No

Administrators must prioritize the update of all Zoom Rooms installations to the latest version to remediate this privilege management defect and protect against local exploitation.