Zoom Fixes Critical Windows Account-Takeover Bug

Zoom has addressed a critical Windows vulnerability, dubbed CVE-2026-53412, that posed a significant risk by allowing unauthenticated attackers to seize user accounts. This bug, which had a near-maximum CVSS score of 9.8, impacted older versions of Workplace, the Windows VDI Client, and the Meeting SDK for Windows. The flaw arose from improper input validation, as revealed in Zoom’s security advisory. While the Offensive Security team identified this vulnerability, Zoom withheld detailed technical specifics.

In addition to this, Zoom tackled other notable vulnerabilities, including CVE-2026-53410 and CVE-2026-53409, both rated 8.8 on the CVSS scale. These problems allowed local users to escalate privileges within various Zoom applications. Users should immediately update to the latest versions to safeguard their systems, even though there is currently no evidence of active exploitation. In January, Zoom resolved multiple other vulnerabilities, continuing their commitment to security.

Read more about the fixes at https://securityaffairs.com/195454/security/zoom-fixes-cve-2026-53412-a-critical-account-takeover-bug.html