MinorCritical vulnerability
CVE-2026-108185 (CVSS 7.4)
NVD · officialPublished Oct 13, 2026Risk 23/100
Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.
Technical details
CVSS
7.4
AV:NetworkAC:HighPR:NoneUI:NoneC:HighI:HighA:None
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source