Rooms Controller
Vendor:
First CVE: Aug 14, 2024 · Active for 1 year
44
Total CVEs
More Total CVEs than 97% of tracked products
22.0
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 34% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Rooms Controller over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 14, 2024
23 months ago
Most Recent CVE
Nov 13, 2025
253 days ago
CVE Severity & Scoring
Rooms Controller44 CVEs
64%
36%
All CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local6 (13.6%)
Network36 (81.8%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network2 (4.5%)
Attack Complexity
Low42 (95.5%)
High2 (4.5%)
Unknown0 (0.0%)
User Interaction
None35 (79.5%)
Unknown0 (0.0%)
Required9 (20.5%)
Privileges Required
Low25 (56.8%)
High4 (9.1%)
None15 (34.1%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (44 CVEs).
44 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-49457HIGH Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access | Aug 12, 2025 | 8.8 | 33 | NO | NO |
CVE-2024-45421HIGH Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access. | Feb 25, 2025 | 8.8 | 28 | NO | NO |
CVE-2025-27440HIGH Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. | Mar 11, 2025 | 8.8 | 27 | NO | NO |
CVE-2025-27439HIGH Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. | Mar 11, 2025 | 8.8 | 27 | NO | NO |
CVE-2025-0151HIGH Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. | Mar 11, 2025 | 8.8 | 27 | NO | NO |
CVE-2025-62483HIGH Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access. | Nov 13, 2025 | 7.5 | 25 | NO | NO |
CVE-2025-49461HIGH Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. | Sep 9, 2025 | 7.4 | 25 | NO | NO |
CVE-2025-49460HIGH Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. | Sep 9, 2025 | 7.5 | 25 | NO | NO |
CVE-2025-58135MEDIUM Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access. | Sep 9, 2025 | 6.5 | 23 | NO | NO |
CVE-2025-0149HIGH Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access. | Mar 11, 2025 | 7.5 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (44 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (44 CVEs).
Media Mentions
Signals from CVEs in this product scope (44 CVEs).
Top CNAs Publishing CVEs For Rooms Controller
Top CWEs
Versions
No cataloged versions.