CVE-2026-108184
HighCVSS 7.4Summary
Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.
Risk Assessment
An attacker on the network may intercept or gain access to sensitive information transmitted by the Zoom client for Windows, threatening the confidentiality of organizational data.
Recommendation
Update Zoom Clients for Windows to the latest version containing the certificate validation fix and avoid using untrusted networks.
Other vulnerabilities in Zoom Client for Windows
See all- CVE-2026-53410High
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
- CVE-2025-58132Medium
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
Original NVD description (English source)
Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS