cyber.hendryadrian.com
Vulnerability & Exploit · bleepingcomputer.com

Zoom Fixes Critical Windows Account-Takeover Flaw

· Original article ↗

Summary

Zoom disclosed CVE-2026-53412, a critical Windows flaw that could enable unauthenticated account takeover over the network. Fixes are available; Zoom reports no evidence of active exploitation.

Key points

  • CVE-2026-53412 is an improper input validation flaw rated 9.8/10 that could allow unauthenticated account takeover over the network.
  • Affected products include Zoom Workplace for Windows and the Zoom Meeting SDK for Windows before version 7.0.0, plus specified older versions of the Windows VDI Client.
  • Zoom recommends installing the latest updates; the advisory provides no further technical details about the flaw.
  • Zoom said it had no indications that CVE-2026-53412 or the other vulnerabilities patched in the release were being exploited.
  • The updates also address three high-severity local privilege-escalation flaws: CVE-2026-53410, CVE-2026-53409, and CVE-2026-53411.

Article Details

Vulnerability Types
  • Improper input validation
  • TOCTOU race condition
  • Improper privilege management
Severity
CVE-2026-53412 is critical (9.8/10); the three additional flaws are high severity.
Affected Versions
  • Zoom Workplace for Windows before 7.0.0
  • Zoom VDI Client for Windows before 7.0.10, 6.6.15, and 6.5.18
  • Zoom Meeting SDK for Windows before 7.0.0
  • Zoom Workplace for Windows before 7.0.5
  • Zoom Workplace VDI Client before 6.5.17 and 6.6.14
  • Zoom VDI Plugin before 6.5.17 and 6.6.14
  • Zoom Rooms for Windows before 7.0.5
  • Remote Control for Zoom Contact Center before 7.0.0
  • Zoom Rooms for Windows before 7.1.0
  • Zoom Workplace VDI Plugin for Windows before 6.6.14
Exploitation Status
not_reported
Exploit Availability
unknown
Patch Status
available
Workarounds
  • Install the latest updates.

CVE

CVE-2026-53409Zoom · RoomsCVE-2026-53409: high-severity improper privilege management flaw affecting Zoom Rooms for Windows before version 7.1.0 that could allow an authenticated user with local access to escalate privileges.CVE-2026-53410Zoom · Remote control for zoom contact center; Zoom · Rooms; +2 moreCVE-2026-53410: high-severity TOCTOU (time-of-check to time-of-use) race condition affecting Zoom Workplace for Windows before 7.0.5, Zoom Workplace VDI Client and VDI Plugin before 6.5.17/6.6.14, Zoom Rooms for WindowsCVE-2026-53411Zoom · Workplace virtual desktop infrastructureCVE-2026-53411: high-severity improper input validation flaw affecting the Zoom Workplace VDI Plugin for Windows before version 6.6.14 that could allow an authenticated user with local access to escalate privileges.CVE-2026-53412Zoom · Workplace desktop; Zoom · Workplace virtual desktop infrastructureZoom has disclosed CVE-2026-53412, a critical improper input validation flaw in Zoom Workplace for Windows, the Zoom VDI Client, and the Zoom Meeting SDK for Windows that could let an unauthenticated attacker take over

Vendors

ZoomZoom has disclosed CVE-2026-53412, a critical improper input validation flaw in Zoom Workplace for Windows, the Zoom VDI Client, and the Zoom Meeting SDK for Windows that could let an unauthenticated attacker take over

Products

Remote Control for Zoom Contact CenterVDI Client and VDI Plugin before 6.5.17/6.6.14, Zoom Rooms for Windows before 7.0.5, and Remote Control for Zoom Contact Center before 7.0.0.Zoom Meeting SDKcritical improper input validation flaw in Zoom Workplace for Windows, the Zoom VDI Client, and the Zoom Meeting SDK for Windows that could let an unauthenticated attacker take over accounts over the network.Zoom RoomsZoom Workplace for Windows before 7.0.5, Zoom Workplace VDI Client and VDI Plugin before 6.5.17/6.6.14, Zoom Rooms for Windows before 7.0.5, and Remote Control for Zoom Contact Center before 7.0.0.Zoom VDI ClientCVE-2026-53412, a critical improper input validation flaw in Zoom Workplace for Windows, the Zoom VDI Client, and the Zoom Meeting SDK for Windows that could let an unauthenticated attacker take over accountsZoom WorkplaceZoom has disclosed CVE-2026-53412, a critical improper input validation flaw in Zoom Workplace for Windows, the Zoom VDI Client, and the Zoom Meeting SDK for Windows that could let an unauthenticated attacker take overZoom Workplace VDI Clientto time-of-use) race condition affecting Zoom Workplace for Windows before 7.0.5, Zoom Workplace VDI Client and VDI Plugin before 6.5.17/6.6.14, Zoom Rooms for Windows before 7.0.5, and Remote Control forZoom Workplace VDI PluginCVE-2026-53411: high-severity improper input validation flaw affecting the Zoom Workplace VDI Plugin for Windows before version 6.6.14 that could allow an authenticated user with local access to escalate privileges.

Related Articles