CVE-2026-30900

Published: Mar 11, 2026Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: security@zoom.us (Secondary)

Description

Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

Affected (3)

Products: Zoom: Meeting Software Development Kit, Workplace Desktop, Workplace Virtual Desktop Infrastructure

Zoom

3 products

Meeting Software Development Kit

Workplace Desktop

Workplace Virtual Desktop Infrastructure

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Software Development Kit	From 6.6.0 to 6.6.11
Zoom Workplace Desktop	From 6.6.0 to 6.6.11
Zoom Workplace Virtual Desktop Infrastructure	Up to 6.6.10

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-26002

Source: security@zoom.us

Vendor Advisory

Timeline

No history available yet.