CVE-2026-30902: Zoom Clients for Windows - Improper Privilege Management
Published Mar 11, 2026
·Updated
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
Affected Software
6 affected components
Zoom Zoom Client for Windows
Zoom Rooms Windows<6.6.0
Zoom Workplace Desktop Windows<6.6.0
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.4.0<6.4.15
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.5.0<6.5.13
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.6.0<6.6.10
Event History
Mar 11, 2026
CVE Published
via MITRE·02:50 PM
Data Sourced
via MITRE·02:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-30902?
CVE-2026-30902 is considered a medium severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2026-30902?
To fix CVE-2026-30902, update your Zoom Client for Windows to the latest version provided by Zoom.
3
Who is affected by CVE-2026-30902?
CVE-2026-30902 affects all authenticated users of certain Zoom Clients for Windows.
4
What type of attack does CVE-2026-30902 enable?
CVE-2026-30902 enables an authenticated user to escalate their privileges through local access.
5
Is there a workaround for CVE-2026-30902?
There are no official workarounds for CVE-2026-30902; updating to the latest version is recommended.