Improper Input Validation in Zoom Desktop Client and VDI Client for Windows
CVE-2026-53412

9.8CRITICAL

Key Information:

Vendor

Zoom Communications

Status
Zoom Workplace For Windows
Vendor
CVE Published:
16 July 2026

Badges

🔥 Trending now📈 Trended📈 Score: 2,070👾 Exploit Exists📰 News Worthy

What is CVE-2026-53412?

CVE-2026-53412 is a serious vulnerability found in the Zoom Desktop Client and VDI Client for Windows, as well as the Zoom Meeting SDK for Windows. This security flaw stems from improper input validation, which could potentially allow unauthenticated users to gain unauthorized access to an account through network connections. The implications of such a vulnerability are significant, as Zoom is widely used for virtual meetings, webinars, and collaboration in various sectors, including education, healthcare, and enterprise environments. If exploited, this vulnerability could lead to account takeover, allowing adversaries to access sensitive discussions, share malicious content, or disrupt operations.

Potential impact of CVE-2026-53412

  1. Unauthorized Account Access: Exploitation of this vulnerability enables unauthorized users to take control of Zoom accounts, potentially leading to data breaches and loss of confidential information discussed during meetings.

  2. Operational Disruption: An attacker could disrupt organizational workflows by taking over meetings, impersonating legitimate users, or manipulating settings, which could severely hinder collaboration and productivity.

  3. Reputational Damage: Organizations that utilize Zoom may suffer reputational harm if a breach occurs, as stakeholders may lose trust in their ability to secure sensitive communications, impacting customer relationships and future business opportunities.

Affected Version(s)

Zoom Workplace for Windows Windows 0 < 7.0.0

News Articles

favicon imageEsecurity Planet

Zoom Patches Critical Account Takeover Vulnerability for Windows  | eSecurity Planet

Zoom patched a critical Windows vulnerability that could enable unauthenticated account takeover.

1 day ago

favicon imageIt Security News

Critical Zoom Workplace Flaw Lets Unauthenticated Attackers Take Over Accounts Remotely - IT Security News

Zoom has disclosed a critical vulnerability in its Windows desktop software that could allow unauthenticated attackers to take over user accounts remotely. This issue, tracked as CVE-2026-53412 and addressed in bulletin ZSB-26014, arises from improper input validation in Zoom Workplace…Read more →

1 day ago

favicon imageIt Security News

Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug - IT Security News

Zoom warns of a critical Windows flaw, tracked as CVE-2026-53412, that could let attackers take over accounts without authentication. Zoom has fixed a critical Windows vulnerability, tracked as CVE-2026-53412 (CVSS score of 9.8) that could allow unauthenticated attackers to hijack…Read more →

2 days ago

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26014

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 📈

    Vulnerability started trending

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by International Business Times

  • Vulnerability published

  • Vulnerability Reserved

.