What is the CVSS score of EUVD-2026-45044?

EUVD-2026-45044 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Zoom Rooms are affected by EUVD-2026-45044?

A high-severity privilege escalation vulnerability in Zoom Rooms for Windows (CVE-2026-53409) allows authenticated local users to elevate from low-privileged accounts to higher privileges, creating…. A patch is available.

How to fix or mitigate EUVD-2026-45044?

Within 24 hours, inventory all Zoom Rooms for Windows systems and identify those running versions before 7.1.0; restrict physical access and local administrative account access to essential authorized personnel only. Within 7 days, implement network segmentation isolating Zoom Rooms systems from production and guest networks, disable unnecessary local user accounts, and enable comprehensive Windows event logging focused on privilege escalation and authentication events. Within 30 days, establish communication with Zoom support to confirm patch and version 7.1.0 release timeline, develop and execute an upgrade plan, and deploy endpoint detection and response (EDR) tools to monitor for privilege escalation exploitation attempts.

Zoom Rooms EUVD-2026-45044

| CVE-2026-53409 HIGH

Improper Input Validation (CWE-20)

2026-07-16 security@zoom.us

GHSA-97jw-3fv7-jf6h

Privilege Escalation Zoom Microsoft Rooms

7.8

CVSS 3.1 · Vendor: zoom

Severity by source

Vendor (zoom) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local privilege escalation by an already-authenticated low-privileged user (AV:L, PR:L, AC:L) yielding full host compromise (C:H/I:H/A:H) with no user interaction and no scope change.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (zoom).

CVSS VectorVendor: zoom

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jul 16, 2026 - 23:03 EUVD

Analysis Generated

Jul 16, 2026 - 21:30 vuln.today

CVE Published

Jul 16, 2026 - 21:17 cve.org

HIGH 7.8

DescriptionCVE.org

Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access.

AnalysisAI

Local privilege escalation in Zoom Rooms for Windows before version 7.1.0 allows an authenticated low-privileged user to elevate to higher privileges via local access, with high impact to confidentiality, integrity, and availability (CVSS 7.8). Zoom's own security team (security@zoom.us) reported the flaw, classified as improper privilege management. No public exploit identified at time of analysis, and it is not listed in CISA KEV.

Technical ContextAI

Zoom Rooms is Zoom's conference-room software/appliance client that runs on Windows to drive meeting-room hardware (displays, controllers, cameras). The vendor tags this as improper privilege management, and NVD assigns CWE-20 (Improper Input Validation); the mismatch between the tag and the CWE suggests the root cause is likely a privilege-management weakness in a local Windows component (e.g., a service, installer, updater, or IPC surface running at elevated privilege) that fails to properly validate or restrict what a lower-privileged local user can do. Because the CVSS vector is AV:L/PR:L, the affected interface is reachable only by a user who already has a local, authenticated session on the host.

RemediationAI

Vendor-released patch: upgrade Zoom Rooms for Windows to version 7.1.0 or later, which resolves the improper privilege management issue per Zoom security bulletin ZSB-26011 (https://www.zoom.com/en/trust/security-bulletin/zsb-26011). No official workaround is published; because exploitation requires local authenticated access, interim compensating controls include restricting interactive and local logon rights on Zoom Rooms Windows hosts to only trusted service/room accounts, enforcing least privilege so standard users cannot run arbitrary local tooling, and monitoring for unexpected privilege changes or new local admin activity on these machines - with the trade-off that these controls reduce but do not eliminate risk and may complicate legitimate room-management workflows until the update is applied.