CVE-2026-108184: High severity Zoom Zoom Client for Windows vulnerability
Published Oct 13, 2026
·Updated
Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.
Affected Software
1 affected component
Zoom Zoom Client for Windows
Event History
Oct 13, 2026
CVE Published
via MITRE·02:28 PM
Data Sourced
via MITRE·02:28 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker does not need authentication or user interaction. Exploitation is described as occurring through network access, although the high attack complexity indicates additional conditions are required.
2
What is the expected impact if exploitation succeeds?
Successful exploitation may disclose information. The provided scoring also indicates high confidentiality and integrity impact, with no availability impact.