CVEvulnerability

CVE-2026-53410

7.0 HIGH Published 2026-07-16 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-07-16
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-367

Description

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

Affected configurations

• zoom remote control for zoom contact center (< 7.0.0) • zoom rooms (< 7.0.5) • zoom workplace desktop (< 7.0.5) • zoom workplace virtual desktop infrastructure (< 6.5.17) • zoom workplace virtual desktop infrastructure (>= 6.6.0 < 6.6.14)

Related

Weakness · CWE (1)

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness

References