Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
oryginał ENCVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:HZoom Workplace Virtual Desktop Infrastructure
APPZoom< 6.3.146.4.10 – 6.4.12 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Powiązane podatności
CVE-2026-30903CRITICAL9.6PL ✓ten sam produkt
Zoom Workplace dla Windows — privilege escalation przez kontrolę ścieżki pliku w funkcji Mail
CVE-2025-49457CRITICAL9.6PL ✓ten sam produkt
Untrusted search path w klientach Zoom dla Windows — privilege escalation przez sieć
CVE-2026-30905HIGH7.8ten sam produkt
External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before vers...
CVE-2026-30902HIGH7.8ten sam produkt
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct a...
CVE-2026-30900HIGH7.8ten sam produkt
Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an aut...