CVE-2026-30905: high-severity vulnerability in Zoom Workplace VDI Plugin
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.1%
External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local access.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Zoom Communications · Zoom Workplace VDI PluginRelated CVEs — Zoom Workplace VDI Plugin
In the same product, most dangerous first.