Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:NZoom Meeting Software Development Kit
APPZoom< 6.5.0Zoom Rooms
APPZoom< 6.5.0Zoom Rooms Controller
APPZoom< 6.5.0Zoom Workplace Desktop
APPZoom< 6.5.0Zoom Workplace Virtual Desktop Infrastructure
APPZoom< 6.3.146.4.0 β 6.4.12 (bez)
π΅
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2026-30903CRITICAL9.6PL βten sam produkt
Zoom Workplace dla Windows β privilege escalation przez kontrolΔ ΕcieΕΌki pliku w funkcji Mail
CVE-2025-49457CRITICAL9.6PL βten sam produkt
Untrusted search path w klientach Zoom dla Windows β privilege escalation przez sieΔ
CVE-2024-24691CRITICAL9.6PL βten sam produkt
Privilege escalation w Zoom Desktop Client, VDI Client i Meeting SDK dla Windows
CVE-2026-53408HIGH8.1ten sam produkt
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and...
CVE-2026-30905HIGH7.8ten sam produkt
External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before vers...