# CVE-2026-30900: Zoom Workplace for Windows privilege escalation in update functionality

Source: https://junglewise.ai/threats/cve-2026-30900-zoom-workplace-for-windows-privilege-escalation-in-update  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-03-11. Updated: 2026-05-14  
License: CC BY 4.0 with a link back

CVE-2026-30900 · Severity: high · CVSS 7.8 · Published 2026-03-11

A vulnerability in the update mechanism of Zoom's Windows applications could allow a user with limited access to a computer to gain higher-level administrative privileges. Zoom is a widely used communication platform for video conferencing, chat, and collaboration. If exploited, an attacker who already has a basic account on a shared or compromised computer could take full control of the system, potentially accessing sensitive data or installing malicious software.

Technologies: [Zoom Meeting SDK](https://junglewise.ai/threats/technologies/meeting-sdk), [Zoom Meeting Software Development Kit](https://junglewise.ai/threats/technologies/meeting-software-development-kit), [Zoom Workplace VDI Client](https://junglewise.ai/threats/technologies/workplace-vdi-client), [Zoom Workplace Desktop](https://junglewise.ai/threats/technologies/workplace-desktop), [Zoom Workplace Virtual Desktop Infrastructure](https://junglewise.ai/threats/technologies/workplace-virtual-desktop-infrastructure). Vendors: [Zoom](https://junglewise.ai/threats/vendors/zoom).

## Quick answers

**Is CVE-2026-30900 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-30900 being exploited in the wild.

**How severe is CVE-2026-30900?** High severity, with a CVSS score of 7.8, published 11 March 2026.

**Which products and versions are affected?** Zoom Meeting SDK 6.6.0 to 6.6.10; Zoom Workplace VDI Client 6.6.10; Zoom Workplace Desktop 6.6.0 to 6.6.10.

**Is there a fix for CVE-2026-30900?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-30900 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-30900?** Check whether you run Zoom Meeting SDK, Zoom Meeting Software Development Kit, Zoom Workplace VDI Client or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A privilege escalation vulnerability exists in the update functionality of certain Zoom Clients for Windows due to an improper check of the minimum version (CWE-754). The flaw resides in how the updater validates software versions during the update process. A local, authenticated attacker with low privileges can exploit this logic error to execute code with elevated permissions. The vulnerability affects Zoom Workplace, VDI, and Meeting SDK versions within the 6.6.x branch. Users are advised to update to version 6.6.11 or later to remediate the issue.

## Affected products

- Zoom Workplace Desktop 6.6.0 to 6.6.10
- Zoom Workplace VDI Client 6.6.10
- Zoom Meeting SDK 6.6.0 to 6.6.10

## Timeline

- 2026-03-10: advisory: Initial publication of ZSB-26002 by Zoom
- 2026-03-11: disclosed: CVE-2026-30900 published to NVD

## References

- [https://www.zoom.com/en/trust/security-bulletin/zsb-26002](https://www.zoom.com/en/trust/security-bulletin/zsb-26002)

## Related threats

- [Zoom Clients use-after-free in annotator function](https://junglewise.ai/threats/cve-2026-53415-zoom-clients-use-after-free-in-annotator-function)
- [Zoom Workplace for Windows improper input validation account takeover](https://junglewise.ai/threats/cve-2026-53412-zoom-workplace-for-windows-improper-input-validation-account)
- [Zoom Workplace improper authorization in custom URL scheme handler](https://junglewise.ai/threats/cve-2026-53408-zoom-workplace-improper-authorization-in-custom-url-scheme)
- [Zoom Workplace improper authorization in custom URL scheme handler](https://junglewise.ai/threats/cve-2026-53407-zoom-workplace-improper-authorization-in-custom-url-scheme)
- [Zoom Workplace VDI Plugin privilege escalation in Windows Universal Installer](https://junglewise.ai/threats/cve-2026-30905-zoom-workplace-vdi-plugin-privilege-escalation-in-windows)