Back Csa.Sg

Critical Vulnerability in Zoom Products

Csa.Sg • July 16, 2026

Attackers can exploit a critical-severity vulnerability in Zoom to conduct an account takeover via network access. Users and administrators of affected products are advised to apply the latest security updates immediately

Security updates have been released to address a critical vulnerability (CVE-2026-53412) affecting the Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and the Zoom Meeting SDK for Windows.

This vulnerability has a Common Vulnerability Scoring System (CVSS v3.1) score of 9.8 out of 10.

Successful exploitation of the input validation vulnerability could allow an unauthenticated remote attacker to conduct an account takeover via network access.

The following products are affected:

Zoom Workplace for Windows before version 7.0.0

Zoom Workplace VDI Client for Windows before version 7.0.10 and 6.6.15 and 6.5.18 in their respective branches

Users and administrators of affected products are advised to update to the latest versions immediately.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Zoom Vulnerability Allows Unauthenticated Account Takeover Zoom has patched a critical vulnerability (CVE-2026-53412) in its Windows desktop client and VDI software that could allow unauthenticated attackers to take over user accounts via network access. The flaw, rated 9.8 out of 10 on the CVSS scale, stems from improper input validation and affects multiple versions of Zoom Workplace and the VDI Client for Windows. Users are urged to update immediately to mitigate potential exploitation, as the vulnerability could lead to unauthorized access to sensitive meetings and data. No evidence of active exploitation has been reported, but the nature of the vulnerability poses significant risks to enterprises using Zoom for collaboration. Additional vulnerabilities were also patched in this update, including privilege escalation issues. The security advisory emphasizes the urgency for organizations to apply the latest updates without delay. 16 sources 73

Extracted Entities

CVEs (1)

CVE-2026-53412

Platforms (1)

Windows