Zoom Workplace VDI Client

Reported Context (4)

Zoom Workplace VDI Client for Windows, before 7.0.11 and 6.6.16 Zoom Patched Three Annotation Flaws That Could Enable Meeting-Client Takeover
Zoom also rolled out Workplace VDI Client for Windows versions 7.0.11 and 6.6.16, and Workplace VDI Plugins versions 7.0.11 and 6.6.15, for all platforms, with patches for CVE-2026-53416, a path traversal flaw leading Zoom Patches Zero-Click RCE and Three Other Vulnerabilities
The most severe is CVE-2026-53412 (CVSS score of 9.8), a critical bug in Zoom’s Workplace and Workplace VDI Client for Windows that could allow remote, unauthenticated attackers to mount account takeover attacks. Splunk and Zoom Patch Multiple Vulnerabilities, Including Critical Flaws
to time-of-use) race condition affecting Zoom Workplace for Windows before 7.0.5, Zoom Workplace VDI Client and VDI Plugin before 6.5.17/6.6.14, Zoom Rooms for Windows before 7.0.5, and Remote Control for Zoom Fixes Critical Windows Account-Takeover Flaw

CVE (11)

People (1)

MITRE ATT&CK (1)

Vendors (2)

Products (9)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.