CVE-2026-53410highCWE-367

CVE-2026-53410: high-severity vulnerability in Zoom Clients

Zoom Clients for Windows - Race Condition

Published · Updated

Follow this CVE+ Monitor Zoom Clients

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. It has an official Brazilian government alert.

ssvc Trackcvss 7epss 0.1%
Official alert in Brazil

Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.

Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Zoom Communications · Zoom Clients
Related CVEs — Zoom Clients

In the same product, most dangerous first.

CVE-2026-53415HIGHZoom Clients - Use After FreeEPSS 0.5%CVE-2026-53413HIGHZoom Clients - Buffer Over-writeEPSS 0.5%CVE-2026-53414MEDIUMZoom Clients - Buffer Over-readEPSS 0.4%CVE-2026-108185HIGHCVE-2026-108185EPSS 0.2%CVE-2026-108184HIGHCVE-2026-108184EPSS 0.2%