CVE-2026-53412: Zoom Workplace VDI Plugin for Windows - Improper Input Validation
Published Jul 16, 2026
·Updated
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.
Affected Software
8 affected components
Zoom Zoom Desktop Client for Windows
Zoom Zoom VDI Client for Windows
Zoom Zoom Meeting SDK for Windows
Zoom Zoom Workplace VDI Plugin for Windows
Zoom Workplace Desktop Windows<7.0.0
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.5.0<6.5.18
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.6.0<6.6.15
Zoom Workplace Virtual Desktop Infrastructure Windows>=7.0.0<7.0.10
Event History
Jul 15, 2026
News Published
via BleepingComputer·08:16 PM
Jul 16, 2026
CVE Published
via MITRE·09:15 PM
Data Sourced
via MITRE·09:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeaknessAffected Software
Jul 17, 2026
News Published
via BleepingComputer·11:03 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-53412?
The severity of CVE-2026-53412 is rated as critical with a score of 9.8.
2
How do I fix CVE-2026-53412?
To fix CVE-2026-53412, update the Zoom Desktop Client, VDI Client, or Meeting SDK to the latest version released by Zoom.
3
What vulnerabilities does CVE-2026-53412 present?
CVE-2026-53412 presents a risk of unauthorized account takeover due to improper input validation.
4
Which software versions are affected by CVE-2026-53412?
CVE-2026-53412 affects the Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows.
5
What types of attacks can CVE-2026-53412 facilitate?
CVE-2026-53412 can facilitate account takeover attacks by exploiting improper input validation.