CVEvulnerability

CVE-2026-53412

9.8 CRITICAL Published 2026-07-16 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-07-16
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20

Description

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

Affected configurations

• zoom workplace desktop (< 7.0.0) • zoom workplace virtual desktop infrastructure (>= 6.5.0 < 6.5.18) • zoom workplace virtual desktop infrastructure (>= 6.6.0 < 6.6.15) • zoom workplace virtual desktop infrastructure (>= 7.0.0 < 7.0.10)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References