Multiple security vulnerabilities have been identified in Zoom's Windows products, including a critical account takeover flaw that allows an unauthenticated user to perform an account takeover over the network.
CVE-2026-53412 (CVSS 9.8): An improper input validation affects the Zoom Desktop Client, VDI Client, and Meeting SDK for Windows, allowing an unauthenticated attacker to take over an account across the network.[/subscribe_to_unlock_form]
Multiple security vulnerabilities have been identified in Zoom's Windows products, including a critical account takeover flaw that allows an unauthenticated user to perform an account takeover over the network.
CVE-2026-53412 (CVSS 9.8): An improper input validation affects the Zoom Desktop Client, VDI Client, and Meeting SDK for Windows, allowing an unauthenticated attacker to take over an account across the network.[emaillocker id="1283"]
CVE-2026-53411 (CVSS 7.8) stems from improper input validation in the Workplace VDI Plugin.
CVE-2026-53409 (CVSS 7.8) involves improper privilege management in Zoom Rooms.
CVE-2026-53410: These three local privilege escalation flaws stem from improper input validation, privilege management, and a time-of-check to time-of-use race condition respectively. Each requires an authenticated local user.
These vulnerabilities collectively present a significant risk to corporate desktops with Zoom installed. Administrators should update every affected product to the fixed version listed above.
We recommend you to refer below link: https://www.zoom.com/en/trust/security-bulletin/
The following reports contain further technical details:
[/emaillocker]