Zoom Clients for Windows - Improper Certificate Validation

  • ZSB-26021
  • CVE-2026-108184
  • High
  • 7.4
  • CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.

 

Users can help keep themselves secure by applying the latest updates available at https://zoom.us/download.

  • Zoom Workplace for Windows starting on version 7.0.0 and before version 7.2.0 and 7.1.9 in their respective branches
  • Zoom Workplace VDI Client for Windows starting on version 7.0.11 and before version 7.0.13
  • Zoom Rooms for Windows starting on version 7.0.0 and before version 7.1.7

Reported by Zoom Offensive Security

Revision Date Description
1.0 10/13/2026

Initial publication.