Critical severity9.8NVD Advisory· Published Jul 16, 2026· Updated Aug 11, 2026

CVE-2026-53412

Description

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

Affected products

Zoom Video Communications, Inc./Workplace Desktop
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*
Range: <7.0.0
Zoom Video Communications, Inc./Workplace Virtual Desktop Infrastructure
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
Range: >=6.5.0,<6.5.18
Zoom Video Communications, Inc./Zoom VDI Clientllm-create
Zoom Video Communications, Inc./Desktop Clientllm-create
Zoom Video Communications, Inc./Meeting SDKllm-create

Patches

Vulnerability mechanics

References

www.zoom.com/en/trust/security-bulletin/zsb-26014nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000