DeutschShown in its original language — a full translation is planned for a future version.
Zoom Rooms und Workplace: Mehrere Schwachstellen ermöglichen Privilegieneskalation
view advisory published 2026-03-09
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Zoom Workplace und Zoom Rooms ausnutzen, um seine Privilegien zu erhöhen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-30903US | critical9.8 | — | ||
External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via net… | ||||
| CVE-2026-30902US | — | — | ||
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access. | ||||
| CVE-2026-30901US | high7.8 | — | ||
Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access. | ||||
| CVE-2026-30900US | — | — | ||
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan