Improper Privilege Management in Zoom Rooms for Windows
CVE-2026-53409

7.8HIGH

Key Information:

Vendor

Zoom Communications

Status
Zoom Rooms
Vendor
CVE Published:
16 July 2026

What is CVE-2026-53409?

A vulnerability exists in Zoom Rooms for Windows that allows authenticated users to escalate their privileges through local access. This flaw can be exploited by users to gain unauthorized control over system settings and functionalities. Users running versions prior to 7.1.0 are at risk and should upgrade to the latest version to mitigate this security issue.

Affected Version(s)

Zoom Rooms Windows 0 < 7.1.0

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26011

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.