CVE-2026-108185: High severity Zoom Zoom Clients vulnerability
Published Oct 13, 2026
·Updated
Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.
Affected Software
1 affected component
Zoom Zoom Clients
Event History
Oct 13, 2026
CVE Published
via MITRE·02:29 PM
Data Sourced
via MITRE·02:29 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What must an attacker be able to do to exploit this issue?
The attacker must have network access and be able to exploit improper certificate validation in the My Notes feature. No authentication or user interaction is required, but the attack complexity is rated high.
2
What is the likely impact of successful exploitation?
Successful exploitation may disclose information. The provided severity vector also indicates potential impact to confidentiality and integrity, with no availability impact listed.