Zoom Patches Critical Windows Flaw That Could Enable Account Takeover

Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover. The vulnerability, tracked as CVE-2026-53412 (CVSS score: 9. 8), affects Zoom Workplace for Windows before version 7. 0.

0 and Zoom Workplace VDI Client for Windows before version 7. 0. 10, 6. 6. 15, and 6. 5. 18 in their respective branches.

"Improper Input Validation in Zoom Desktop Client for Windows and Zoom VDI Client for Windows may allow an unauthenticated user to conduct an account takeover via network access," Zoom said in an advisory released this week.

The latest security fixes also address three high-severity flaws - It's worth noting that CVE-2026-53410 affects the following products - As of writing, there are no indications that any of the flaws are being exploited in real-world attacks. Users can stay protected by applying the latest updates.

(The story was updated after publication to reflect Zoom's removal of Meeting SDK for Windows as an affected product.) Learn how to secure AI agents with practical controls for access, visibility, secrets, and risk containment.

Learn how to govern risk, secure AI-built software, and keep control as development moves at machine speed.