NetSight
critical9.8

CVE-2026-53412

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user t…

Impact

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

Affected products

VendorProductAffected versions
ZoomWorkplace Desktop
before 7.0.0
ZoomWorkplace Virtual Desktop Infrastructure
from 6.5.0 before 6.5.18
from 6.6.0 before 6.6.15
from 7.0.0 before 7.0.10

Weakness classification

References