Unauthenticated Takeover: Critical 9.6 CVSS Zoom Flaw Exposes Windows Users to Remote Privilege Escalation

Zoom published security advisories for four Windows vulnerabilities — the most severe is CVE-2026-30903 (CVSS 9.6) enabling potential unauthenticated privilege escalation via the Mail feature, and three additional high-severity local privilege-escalation flaws affect Zoom Workplace, VDI clients, Meeting SDK, and Zoom Rooms; administrators should apply the listed fixed versions immediately.