CVE-2026-53412

Published: Jul 16, 2026Modified: Aug 11, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: security@zoom.us (Secondary)

Description

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

Affected (4)

Products: Zoom: Workplace Desktop, Workplace Virtual Desktop Infrastructure

Zoom

2 products

Workplace Desktop

Workplace Virtual Desktop Infrastructure

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Zoom Workplace Desktop	Before 7.0.0
Zoom Workplace Virtual Desktop Infrastructure	From 6.5.0 to 6.5.18
Zoom Workplace Virtual Desktop Infrastructure	From 6.6.0 to 6.6.15
Zoom Workplace Virtual Desktop Infrastructure	From 7.0.0 to 7.0.10

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-26014

Source: security@zoom.us

Vendor Advisory

Timeline

No history available yet.