High severity7.8NVD Advisory· Published Mar 11, 2026· Updated May 14, 2026

CVE-2026-30902

Description

Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoom Video Communications, Inc./Rooms
cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
Range: <6.6.0
Zoom Video Communications, Inc./Workplace Desktop
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*
Range: <6.6.0
Zoom Video Communications, Inc./Workplace Virtual Desktop Infrastructure
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
Range: >=6.4.0,<6.4.15
Zoom Video Communications, Inc./Zoom Rooms for Windowsllm-fuzzy
Zoom Communications Inc./Zoom Workplacev5
Range: see references

Patches

Vulnerability mechanics

References

www.zoom.com/en/trust/security-bulletin/zsb-26004nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000