391/69 Friday, July 17, 2026
Zoom has issued an advisory for a Critical security vulnerability discovered internally, affecting its applications on Windows as well as software development kits (SDKs). The vulnerability, tracked as CVE-2026-53412, has been rated 9.8 out of 10 in severity. It could allow attackers to exploit the issue over the network and take over user accounts without requiring authentication. As Zoom is a widely used communication platform worldwide, this issue is significant and could pose broad risks to the security of user data at both individual and organizational levels.
Technical details indicate that the vulnerability is caused by improper input validation, which could allow attackers to successfully take over user accounts. The directly affected software includes Zoom Workplace for Windows versions before 7.0.0, VDI Client versions before 7.0.10, 6.6.15, and 6.5.18, as well as Meeting SDK for Windows versions before 7.0.0. In addition, the latest security patches also address three High-severity vulnerabilities, CVE-2026-53409, CVE-2026-53410, and CVE-2026-53411, which could allow local users to escalate their privileges. However, there are currently no reports or evidence indicating that any of these vulnerabilities have been actively exploited.
To reduce risk and prevent potential cyber threats, general users and organizational IT administrators should immediately check the versions of the software in use and update Zoom Workplace, along with all related components, to the latest versions recommended by the vendor. Organizations should also implement measures to monitor and enforce regular software updates across internal networks to close security gaps and strengthen the overall protection of organizational information assets.