by Kastro
Paper/Archive/CVE-2026-53412

CVE-2026-53412

Zoom Communications Zoom Workplace for Windows — Zoom Workplace VDI Plugin for Windows - Improper Input Validation

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 44.8.448 × 209.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

Affected

ProductAffectedFixed inSource
Zoom Workplace for Windows< 7.0.07.0.0CNA

Scores by source

Zoom (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refzoom.com/en/trust/security-bulletin/zsb-26014