CVE-2026-30903

CRITICAL

Zoom Workplace <6.6.0 - Privilege Escalation

Title source: llm

Description

External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.

References (1)

[Various Sources] https://www.zoom.com/en/trust/security-bulletin/zsb-26005

Scores

CVSS v3 9.6

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Classification

CWE

CWE-73

Status draft

Timeline

Published Mar 11, 2026

Tracked Since Mar 11, 2026