CVEvulnerability
CVE-2026-30906
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-05-13
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-426
Description
Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.
Affected configurations
• zoom rooms (< 7.0.0)
Related
Weakness · CWE (1)
- CWE-426 Untrusted Search Path weakness
References
- https://www.zoom.com/en/trust/security-bulletin/zsb-26008 Vendor Advisory