CVEvulnerability
CVE-2026-30900
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-03-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-754
Description
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
Affected configurations
• zoom meeting software development kit (>= 6.6.0 < 6.6.11)
• zoom workplace desktop (>= 6.6.0 < 6.6.11)
• zoom workplace virtual desktop infrastructure (<= 6.6.10)
Related
Weakness · CWE (1)
- CWE-754 Improper Check for Unusual or Exceptional Conditions weakness
References
- https://www.zoom.com/en/trust/security-bulletin/zsb-26002 Vendor Advisory