Zoom Clients - Improper Certificate Validation

  • ZSB-26022
  • CVE-2026-108185
  • High
  • 7.4
  • CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.

 

Users can help keep themselves secure by applying the latest updates available at https://zoom.us/download.

  • Zoom Workplace for Windows starting on version 7.1.5 and before version 7.2.0 and 7.1.9 in their respective branches
  • Zoom Workplace for MacOS starting on version 7.0.5 and before version 7.2.0 and 7.1.9 in their respective branches
  • Zoom Workplace for Linux starting on version 7.0.5 and before version 7.2.0 and 7.1.9 in their respective branches
  • Zoom Workplace for Android starting on version 7.0.5 and before version 7.2.0
  • Zoom Workplace for iOS starting on version 7.0.5 and before version 7.2.0

Reported by Zoom Offensive Security

Revision Date Description
1.0 10/13/2026

Initial publication.