CVE-2026-30906 PUBLISHED

Assigner: Zoom
Reserved: 06.03.2026 Published: 13.05.2026 Updated: 13.05.2026

Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Product Status

Vendor Zoom Communications
Product Zoom Rooms
Versions Default: unaffected
  • affected from 0 to 7.0.0 (excl.)

References

Problem Types

  • CWE-426: Untrusted Search Path CWE