← Back

CVE-2026-53406

nvd nist
Published: Jun 12, 2026Modified: Jun 29, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: security@zoom.us (Secondary)

Description

Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.

Affected (1)

Products: Zoom: Remote Control
Zoom
1 product
Remote Control
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Remote Control
Before 7.0.0

Related CWEs

CWE-345
Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (1)

Source: security@zoom.us
Vendor Advisory

Timeline

No history available yet.