TOCTOU race condition in Zoom Workplace VDI Plugin for Windows (CVE-2026-53411)

CVE-2026-53411 is a time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of the Zoom Workplace VDI Plugin for Windows, which the vendor additionally characterizes as an Improper Input Validation issue. An authenticated local user may exploit this vulnerability to conduct an escalation of privilege via local access (CVSS 7.8 High). Affected versions: - Zoom Workplace VDI Plugin for Windows versions prior to 6.6.14 We recommend updating to: 6.6.14. CVSS 7.8 · our assessment: this_week Vendor advisory: https://www.zoom.com/en/trust/security-bulletin/zsb-26013 Details: https://vuln.today/cve/CVE-2026-53411