CVE-2026-53410

Analyzed Analyzed - Analysis Complete

Zoom Client for Windows Privilege Escalation via TOCTOU Race Condition

Publication date: 2026-07-16

Last updated on: 2026-08-17

Assigner: Zoom Video Communications, Inc.

Description

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-16

Last Modified

2026-08-17

Generated

2026-08-26

AI Q&A

2026-07-17

EPSS Evaluated

2026-08-24

NVD

CVE-2026-53410

Affected Vendors & Products

Vendor	Product	Version / Range
zoom	remote_control_for_zoom_contact_center	to 7.0.0 (exc)
zoom	rooms	to 7.0.5 (exc)
zoom	workplace_desktop	to 7.0.5 (exc)
zoom	workplace_virtual_desktop_infrastructure	to 6.5.17 (exc)
zoom	workplace_virtual_desktop_infrastructure	From 6.6.0 (inc) to 6.6.14 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-367	The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

Executive Summary

This vulnerability is a time-of-check to time-of-use (TOCTOU) race condition in Zoom Clients for Windows. It occurs during installation or uninstallation processes and could let an authenticated local user escalate their privileges on the system.

Detection Guidance

This vulnerability involves a TOCTOU race condition in Zoom Client for Windows during installation/uninstallation. Detection requires monitoring for unusual privilege escalation events during these processes. Check Windows Event Logs for suspicious installer activity and verify Zoom Client versions. No specific commands are provided in the available context.

Impact Analysis

An attacker with local access could exploit this to gain higher privileges, potentially allowing them to take control of the system or perform unauthorized actions.

Compliance Impact

This vulnerability could allow privilege escalation through a TOCTOU race condition in Zoom Clients for Windows. While not directly tied to GDPR or HIPAA, such vulnerabilities may impact compliance by enabling unauthorized access to sensitive data or systems, potentially violating confidentiality requirements in these regulations.

Mitigation Strategies

Update Zoom Client for Windows to the latest version immediately to patch the TOCTOU race condition. Ensure no unauthorized local users have administrative privileges.

Hi! I’m here to help you understand CVE-2026-53410. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70