Zoom patches critical flaw that could let attackers take over Windows accounts

Zoom has patched a critical vulnerability in its Windows software that could let an unauthenticated attacker take over user accounts over the network. Tracked as CVE-2026-53412 and rated 9.8, the flaw is an improper input validation issue affecting Zoom Workplace for Windows, the VDI client, and the Meeting SDK before version 7.0.0. Zoom found it internally, shared no technical details, and says there is no evidence of exploitation or public exploit code yet. Because the Windows client sits on millions of corporate desktops and the flaw needs no credentials or user interaction, it poses a broad risk, so applying the latest updates promptly is the key mitigation.

Check

Inventory where Zoom Workplace for Windows, the VDI client, or the Meeting SDK are deployed, check their versions, and roll out 7.0.0 or later, prioritizing widely used and internet-reachable systems.

Affected

Organizations and users running Zoom Workplace for Windows, the Windows VDI client, or the Windows Meeting SDK before version 7.0.0 (CVE-2026-53412); an unauthenticated network attacker could take over accounts without user interaction.

Fix

Update all affected Zoom Windows components to version 7.0.0 or later, apply the accompanying fixes for the related privilege-escalation flaws, and keep Zoom clients on automatic updates where possible.