← Back

CVE-2026-30906

nvd nist
Published: May 13, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: security@zoom.us (Secondary)

Description

Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.

Affected (1)

Products: Zoom: Rooms
Zoom
1 product
Rooms
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Rooms
Before 7.0.0

Related CWEs

CWE-426
Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (1)

Source: security@zoom.us
Vendor Advisory

Timeline

No history available yet.