CVE-2026-30900

7.8 highEPSS 0.1%

High (7.8) in zoom. EPSS 0.1% chance of exploitation in the next 30 days.

Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-754
Published: 2026-03-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zoom:meeting_software_development_kit
zoom:workplace_desktop
zoom:workplace_virtual_desktop_infrastructure

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26002

Check your stack JSON