Is CVE-2026-30900 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-30900 being exploited in the wild.

How severe is CVE-2026-30900?

High severity, with a CVSS score of 7.8, published 11 March 2026.

Which products and versions are affected?

Zoom Meeting SDK 6.6.0 to 6.6.10; Zoom Workplace VDI Client 6.6.10; Zoom Workplace Desktop 6.6.0 to 6.6.10.

Is there a fix for CVE-2026-30900?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-30900 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-30900?

Check whether you run Zoom Meeting SDK, Zoom Meeting Software Development Kit, Zoom Workplace VDI Client or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-30900: Zoom Workplace for Windows privilege escalation in update functionality

CVE-2026-30900 · Severity: high · CVSS 7.8 · Published 2026-03-11

A vulnerability in the update mechanism of Zoom's Windows applications could allow a user with limited access to a computer to gain higher-level administrative privileges. Zoom is a widely used communication platform for video conferencing, chat, and collaboration. If exploited, an attacker who already has a basic account on a shared or compromised computer could take full control of the system, potentially accessing sensitive data or installing malicious software.

Technologies: Zoom Meeting SDK, Zoom Meeting Software Development Kit, Zoom Workplace VDI Client, Zoom Workplace Desktop, Zoom Workplace Virtual Desktop Infrastructure. Vendors: Zoom.

Quick answers

Is CVE-2026-30900 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-30900 being exploited in the wild.
How severe is CVE-2026-30900?: High severity, with a CVSS score of 7.8, published 11 March 2026.
Which products and versions are affected?: Zoom Meeting SDK 6.6.0 to 6.6.10; Zoom Workplace VDI Client 6.6.10; Zoom Workplace Desktop 6.6.0 to 6.6.10.
Is there a fix for CVE-2026-30900?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-30900 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-30900?: Check whether you run Zoom Meeting SDK, Zoom Meeting Software Development Kit, Zoom Workplace VDI Client or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A privilege escalation vulnerability exists in the update functionality of certain Zoom Clients for Windows due to an improper check of the minimum version (CWE-754). The flaw resides in how the updater validates software versions during the update process. A local, authenticated attacker with low privileges can exploit this logic error to execute code with elevated permissions. The vulnerability affects Zoom Workplace, VDI, and Meeting SDK versions within the 6.6.x branch. Users are advised to update to version 6.6.11 or later to remediate the issue.

Affected products

Zoom Workplace Desktop 6.6.0 to 6.6.10
Zoom Workplace VDI Client 6.6.10
Zoom Meeting SDK 6.6.0 to 6.6.10

Timeline

2026-03-10: advisory: Initial publication of ZSB-26002 by Zoom
2026-03-11: disclosed: CVE-2026-30900 published to NVD

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26002

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.