CVE-2026-53412

CriticalCVSS 9.8

Published: 16/07/2026(UTC)Updated: 17/07/2026(UTC)Translated: 18/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

40th percentile - higher than 40% of all known CVEs

Summary

A vulnerability in Zoom Desktop Client for Windows, VDI Client, and Meeting SDK allows an unauthenticated attacker to perform account takeover over the network. The issue stems from improper input validation.

Risk Assessment

An attacker can take over a user's account without knowing the password, leading to data confidentiality and integrity breaches and potential further attacks using the compromised account.

Recommendation

Immediately update Zoom Desktop Client, VDI Client, and Meeting SDK to the latest patched version. Where possible, restrict network access to these components.

Original NVD description (English source)

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.