Zoom Patches Critical Windows Flaw That Could Enable Account Takeover
Summary: Zoom released security updates for a critical improper input validation flaw in Zoom Workplace for Windows, tracked as CVE-2026-53412 with a CVSS score of 9.8, that Zoom says may let an unauthenticated user conduct an account takeover via network access. The flaw affects Zoom Workplace for Windows before version 7.0.0 and Zoom Workplace VDI Client for Windows before versions 7.0.10, 6.6.15, and 6.5.18, and the same fixes address three high-severity flaws, with no indications as of writing that any are being exploited in real-world attacks.
What's compelling: An unauthenticated attacker needs only network access to attempt account takeover on a 9.8-rated flaw in a client most organizations already run, and the fix only lands when users apply the update.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-53410CVE-2026-53412
- Related
- ⚡ Weekly Recap: Word Press RCE, Sonic Wall 0-Days, AI Service Attacks, Share Point 0-Day and More Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026