CVE-2026-30902

Published: Mar 11, 2026Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: security@zoom.us (Secondary)

Description

Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

Affected (5)

Products: Zoom: Rooms, Workplace Desktop, Workplace Virtual Desktop Infrastructure

Zoom

3 products

Rooms

Workplace Desktop

Workplace Virtual Desktop Infrastructure

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Zoom Rooms	Before 6.6.0
Zoom Workplace Desktop	Before 6.6.0
Zoom Workplace Virtual Desktop Infrastructure	From 6.4.0 to 6.4.15
Zoom Workplace Virtual Desktop Infrastructure	From 6.5.0 to 6.5.13
Zoom Workplace Virtual Desktop Infrastructure	From 6.6.0 to 6.6.10

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-26004

Source: security@zoom.us

Vendor Advisory

Timeline

No history available yet.