**Zoom** has issued critical security updates for **Zoom Workplace for Windows**, addressing a severe vulnerability that could lead to account takeovers. The flaw, identified as **CVE-2026-53412** with a CVSS score of 9.8, impacts the **Zoom Desktop Client for Windows**, **Zoom VDI Client for Windows**, and **Zoom Meeting SDK for Windows**. According to **Zoom's** security advisory, "Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access." ### Additional High-Severity Flaws Addressed Beyond the critical account takeover vulnerability, **Zoom's** latest security fixes also resolve three high-severity issues: * **CVE-2026-53411** (CVSS score: 7.8): An improper input validation vulnerability in the **Zoom Workplace VDI Plugin for Windows** (before version 6.6.14) that could enable an authenticated user to escalate privileges via local access. * **CVE-2026-53410** (CVSS score: 7.0): A time-of-check to time-of-use (**TOCTOU**) race condition vulnerability during the installation and uninstallation processes of certain **Zoom Clients for Windows**, potentially allowing an authenticated local user to escalate privileges. * **CVE-2026-53409** (CVSS score: 7.8): An improper privilege management vulnerability in **Zoom Rooms for Windows** (before version 7.1.0) that could permit an authenticated user to escalate privileges via local access. ### Products Affected by CVE-2026-53410 **CVE-2026-53410** specifically affects a range of **Zoom** products, including: * **Zoom Workplace for Windows** before version 7.0.5 * **Zoom Workplace VDI Client for Windows** before 6.5.17 and 6.6.14 (in their respective branches) * **Zoom Workplace VDI plugin for Windows** before 6.5.17 and 6.6.14 (in their respective branches) * **Zoom Rooms for Windows** before 7.0.5 * **Remote Control for Zoom Contact Center for Windows** before version 7.0.0 ### Immediate Action Recommended Currently, there are no reported instances of these vulnerabilities being exploited in the wild. However, given the severity, especially of **CVE-2026-53412**, **IT Security professionals** and privacy-conscious users are strongly urged to apply the latest **Zoom** updates without delay to mitigate potential risks.