CVE-2026-53412: critical vulnerability in Zoom Workplace for Windows
Zoom Workplace VDI Plugin for Windows - Improper Input Validation
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. It has an official Brazilian government alert.
ssvc Trackcvss 9.8epss 0.5%
Official alert in Brazil
Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.
- CISC Gov.br · 21 Jul 2026Boletim do CISC de Vulnerabilidaderead on gov.br ↗
Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Zoom Communications · Zoom Workplace for Windows