CVE-2026-30905: Workplace Virtual Desktop Infrastructure: güvenlik açığı

Açıklama (NVD)

External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local access.

Özet bilgiler

Ürün

Zoom Workplace Virtual Desktop Infrastructure

CVSS v3.1

7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,12 (yüzdelik 2)

CWE

CWE-73

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• www.zoom.com
• CWE-73