Untrusted Search Path Vulnerability in Zoom Rooms for Windows by Zoom
CVE-2026-30906

7.8HIGH

Key Information:

Vendor

Zoom Communications

Status
Zoom Rooms
Vendor
CVE Published:
13 May 2026

What is CVE-2026-30906?

A vulnerability exists in the installer for Zoom Rooms for Windows that allows an authenticated user to escalate privileges via untrusted search path manipulation. This security flaw can potentially lead to unauthorized actions within the application, making users' systems more vulnerable to exploitation if the software is not updated to version 7.0.0 or later. Ensuring timely updates and implementing proper security measures can mitigate the risks associated with this vulnerability.

Affected Version(s)

Zoom Rooms Windows 0 < 7.0.0

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26008

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.