Improper Certificate Validation in Zoom Clients for My Notes Feature
CVE-2026-108185

7.4HIGH

Key Information:

Vendor: Zoom Communications
Status: Zoom Clients
Vendor: CVE Published:; 13 October 2026

🔔 Create Zoom Communications Vulnerability Alert

What is CVE-2026-108185?

A vulnerability exists in the My Notes feature of certain Zoom Clients due to improper certificate validation. This flaw may enable an unauthenticated user to exploit network access, potentially leading to information disclosure. It is crucial for users of affected Zoom products to address this and ensure they are using the latest versions to mitigate risk.

Affected Version(s)

Zoom Clients Windows see references

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26022

CVSS V3.1

Score:

7.4

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 13, 2026
Vulnerability Reserved
Oct 9, 2026

CVE-2026-108185 Data

JSON