Zoom Workplace for Windows - Improper Input Validation (CVE-2026-53412)

Information Security Advisory

A recently disclosed vulnerability (CVE-2026-53412) that affects Zoom Workplace for Windows and Zoom Workplace VDI Client for Windows and may allow an unauthenticated remote attacker to take over a user account via network access.

Severity level:
CVSS Score: 9.8/Critical.

Description:
CVE-2026-53412 is a critical vulnerability caused by improper input validation in Zoom Workplace for Windows and Zoom Workplace VDI Client for Windows. An unauthenticated attacker can exploit the flaw remotely over a network to perform an account takeover.

Affected Versions:
Zoom Workplace for Windows before 7.0.0.
Zoom Workspace VDI client for Windows before (7.0.10, 6.6.15, 6.5.18)

Impact:
Successful exploitation may allow attackers to take over affected Zoom account.

Resolution:
Upgrade affected software to the latest supported versions.

Reference:

https://www.cyber.gc.ca/en/alerts-advisories/zoom-security-advisory-av26-707

https://www.zoom.com/en/trust/security-bulletin/zsb-26014/

https://www.bleepingcomputer.com/news/security/zoom-warns-of-critical-account-takeover-vulnerability/

https://www.tenable.com/cve/CVE-2026-53412

UIT Information Security

Contact

IT Client Services at askIT@yorku.ca or 416 736 5800

PRIVACY POLICY | VISIT WWW.YORKU.CA
This email was sent by: York University, 4700 Keele Street, Toronto, Ontario M3J 1P3

This email is viewed best in Microsoft Outlook for web