Main Vulnerability Database Vulnerabilities #VU123679

Missing support for integrity check in Zoom Video Communications, Inc. products - CVE-2026-30900

Published: March 10, 2026

Vulnerability identifier: #VU123679

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-30900

CWE-ID: CWE-353

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists in the update functionality due to software does not check if the version to be installed is newer than the current version. A local user can downgrade current software version and exploit known vulnerabilities in it.

Affected software

Zoom Meeting SDK for Windows
Zoom Workplace Desktop App for Windows
Virtual Desktop Infrastructure (VDI)

How to mitigate CVE-2026-30900

Install updates from vendor's website.

Zoom Meeting SDK for Windows - update to 6.6.11
Zoom Workplace Desktop App for Windows - update to 6.6.11 23272
Virtual Desktop Infrastructure (VDI) - update to 6.6.11.26890

External References

https://www.zoom.com/en/trust/security-bulletin/ZSB-26002/

Related Security Bulletins