TOCTOU privilege escalation in Zoom Clients for Windows (CVE-2026-53410)

CVE-2026-53410 describes a time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows. An authenticated local user could exploit this condition to escalate privileges. The vulnerability is rated High severity with a CVSS score of 7. Affected versions: - Zoom Workplace for Windows before version 7.0.5 - Zoom Workplace VDI Client for Windows before 6.5.17 and 6.6.14 in their respective branch - Zoom Workplace VDI plugin for Windows before 6.5.17 and 6.6.14 in their respective branch - Zoom Rooms for Windows before 7.0.5 - Remote Control for Zoom Contact Center for Windows before version 7.0.0 We recommend updating to: Zoom Workplace for Windows 7.0.5, Zoom Workplace VDI Client for Windows 6.5.17 and 6.6.14, Zoom Workplace VDI plugin for Windows 6.5.17 and 6.6.14, Zoom Rooms for Windows 7.0.5, Remote Control for Zoom Contact Center for Windows 7.0.0. CVSS 7.0 · our assessment: this_week Vendor advisory: https://www.zoom.com/en/trust/security-bulletin/zsb-26012 Details: https://vuln.today/cve/CVE-2026-53410