VULNERABILITY INTELLIGENCE

CVE-2026-30903

CVSS score9.6 CRITICAL
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-03-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Weakness classification

  • security@zoom.us: CWE-73
  • nvd@nist.gov: CWE-610

Primary references