CVE-2026-30901: Zoom Rooms for Windows - Improper Input Validation
Published Mar 11, 2026
·Updated
Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.
Affected Software
2 affected components
Zoom Zoom Rooms for Windows<6.6.5
Zoom Rooms Windows<6.6.5
Event History
Mar 11, 2026
CVE Published
via MITRE·02:47 PM
Data Sourced
via MITRE·02:47 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-30901?
CVE-2026-30901 has been classified as a medium severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2026-30901?
To fix CVE-2026-30901, update Zoom Rooms for Windows to version 6.6.5 or later.
3
Who is affected by CVE-2026-30901?
CVE-2026-30901 affects authenticated users of Zoom Rooms for Windows versions prior to 6.6.5.
4
What type of vulnerability is CVE-2026-30901?
CVE-2026-30901 is classified as an improper input validation vulnerability.
5
Can CVE-2026-30901 be exploited remotely?
CVE-2026-30901 requires local access to exploit, so it cannot be exploited remotely.