CVE-2026-53410
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
Risk Assessment
The risk involves a potential privilege escalation by an attacker, which could lead to unauthorized access to sensitive data or full control over the workstation.
Recommendation
It is recommended to immediately update Zoom Client for Windows to the latest version that includes a fix for this vulnerability. Additionally, restrict local access to systems where Zoom is installed.
Other vulnerabilities in Zoom Client for Windows
See all- CVE-2026-108184High
Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.
- CVE-2025-58132Medium
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
Original NVD description (English source)
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS