Improper input validation in Zoom Desktop and VDI Client for Windows (CVE-2026-53412)

CVE-2026-53412 is a critical improper input validation vulnerability (CVSS 9.8) in Zoom Desktop Client for Windows and Zoom VDI Client for Windows. An unauthenticated attacker with network access may exploit this vulnerability to conduct an account takeover. Affected versions: - Zoom Workplace for Windows before version 7.0.0 - Zoom Workplace VDI Client for Windows before version 7.0.10 - Zoom Workplace VDI Client for Windows before version 6.6.15 We recommend updating to: Zoom Workplace for Windows 7.0.0, Zoom Workplace VDI Client for Windows 7.0.10, 6.6.15, 6.5.18. CVSS 9.8 · our assessment: act_now Vendor advisory: https://www.zoom.com/en/trust/security-bulletin/zsb-26014 Details: https://vuln.today/cve/CVE-2026-53412