CVE-2026-53412

Received Received - Intake

Improper Input Validation in Zoom Desktop Client for Windows

Publication date: 2026-07-16

Last updated on: 2026-07-16

Assigner: Zoom Video Communications, Inc.

Description

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-16

Last Modified

2026-07-16

Generated

2026-07-17

AI Q&A

2026-07-17

EPSS Evaluated

N/A

NVD

CVE-2026-53412

Affected Vendors & Products

Vendor	Product	Version / Range
zoom	desktop_client	*
zoom	vdi_client	*
zoom	meeting_sdk	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper input validation in Zoom's Windows-based clients and SDKs. An unauthenticated attacker could exploit it to take over a user's account by sending specially crafted network requests.

Impact Analysis

If exploited, an attacker could gain full control of your Zoom account without needing your credentials. This could lead to unauthorized meetings, data access, or impersonation of the affected user.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Organizations using affected Zoom versions may face compliance breaches.

Mitigation Strategies

Update Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows to the latest patched version immediately to address the improper input validation flaw that could lead to account takeover.

Hi! I’m here to help you understand CVE-2026-53412. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70