CVE-2026-53411
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
Risk Assessment
The organization faces a risk of privilege escalation by a local user, potentially leading to unauthorized access to sensitive data or systems.
Recommendation
It is recommended to immediately update Zoom Clients for Windows to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in Zoom Clients for Windows
See all- CVE-2026-30902High
Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
- CVE-2026-30900High
Improper check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
Original NVD description (English source)
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.