CVE-2026-30900
Published: 11 March 2026
Summary
CVE-2026-30900 is a high-severity Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability in Zoom Meeting Software Development Kit. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 5.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and AC-6 (Least Privilege).
Deeper analysis
CVE-2026-30900 involves an improper check of minimum version in the update functionality of certain Zoom Clients for Windows. This flaw, linked to CWE-754, enables an authenticated user to conduct an escalation of privilege via local access. It carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and was published on 2026-03-11T15:16:29.787.
A local attacker with low privileges, such as an authenticated user on the Windows system, can exploit this vulnerability due to its low attack complexity and lack of need for user interaction. Successful exploitation allows high-impact gains in confidentiality, integrity, and availability, typically manifesting as privilege escalation.
Zoom's security bulletin at https://www.zoom.com/en/trust/security-bulletin/zsb-26002 provides details on advisories and patches for mitigation.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-11164
Vulnerability details
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Local privilege escalation via improper minimum version check in Zoom update functionality directly matches exploitation of a software vulnerability for privilege escalation.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly requires timely patching of the improper minimum version check flaw in Zoom Client update functionality as detailed in the vendor security bulletin.
Verifies software integrity during updates to detect and prevent exploitation of improper version checks that could lead to privilege escalation.
Enforces least privilege on processes including update mechanisms, limiting the scope and success of local privilege escalation by low-privileged authenticated users.