EUVD-2026-45044
GHSA-97jw-3fv7-jf6h
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local privilege escalation by an already-authenticated low-privileged user (AV:L, PR:L, AC:L) yielding full host compromise (C:H/I:H/A:H) with no user interaction and no scope change.
Primary rating from Vendor (zoom).
CVSS VectorVendor: zoom
Lifecycle Timeline
3DescriptionCVE.org
Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access.
AnalysisAI
Local privilege escalation in Zoom Rooms for Windows before version 7.1.0 allows an authenticated low-privileged user to elevate to higher privileges via local access, with high impact to confidentiality, integrity, and availability (CVSS 7.8). Zoom's own security team (security@zoom.us) reported the flaw, classified as improper privilege management. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Technical ContextAI
Zoom Rooms is Zoom's conference-room software/appliance client that runs on Windows to drive meeting-room hardware (displays, controllers, cameras). The vendor tags this as improper privilege management, and NVD assigns CWE-20 (Improper Input Validation); the mismatch between the tag and the CWE suggests the root cause is likely a privilege-management weakness in a local Windows component (e.g., a service, installer, updater, or IPC surface running at elevated privilege) that fails to properly validate or restrict what a lower-privileged local user can do. Because the CVSS vector is AV:L/PR:L, the affected interface is reachable only by a user who already has a local, authenticated session on the host.
RemediationAI
Vendor-released patch: upgrade Zoom Rooms for Windows to version 7.1.0 or later, which resolves the improper privilege management issue per Zoom security bulletin ZSB-26011 (https://www.zoom.com/en/trust/security-bulletin/zsb-26011). No official workaround is published; because exploitation requires local authenticated access, interim compensating controls include restricting interactive and local logon rights on Zoom Rooms Windows hosts to only trusted service/room accounts, enforcing least privilege so standard users cannot run arbitrary local tooling, and monitoring for unexpected privilege changes or new local admin activity on these machines - with the trade-off that these controls reduce but do not eliminate risk and may complicate legitimate room-management workflows until the update is applied.
Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Wind
Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of
Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via netwo
Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow
The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before ver
Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network acce
Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation o
Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial
Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a p
Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of pr
Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct a
Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of
Same weakness CWE-20 – Improper Input Validation
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today