CVE-2026-53412

Critical · CVSS 9.8

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: other; CWE-20

Description

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26014

Status: profiled · ingested 2026-08-12T00:00:50.000Z