VULNERABILITY INTELLIGENCE
CVE-2026-30900
CVSS score7.8 HIGH
EPSS probability0.13%
CISA KEVNot currently listed
Published2026-03-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
Weakness classification
- security@zoom.us: CWE-754
Primary references
- security@zoom.us — Vendor Advisory