# CVE-2026-53412: Zoom Workplace for Windows improper input validation account takeover

Source: https://junglewise.ai/threats/cve-2026-53412-zoom-workplace-for-windows-improper-input-validation-account  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-16. Updated: 2026-07-16  
License: CC BY 4.0 with a link back

CVE-2026-53412 · Severity: critical · CVSS 9.8 · Published 2026-07-16

A vulnerability in the Zoom application for Windows could allow an unauthorized person to take over a user's account over the network. Zoom is a widely used communication platform for video conferencing, chat, and collaboration. An exploit could lead to unauthorized access to sensitive meetings, private messages, and personal user data, potentially compromising corporate communications.

Technologies: [Zoom Workplace](https://junglewise.ai/threats/technologies/workplace), [Zoom Workplace VDI Client](https://junglewise.ai/threats/technologies/workplace-vdi-client). Vendors: [Zoom](https://junglewise.ai/threats/vendors/zoom).

## Quick answers

**Is CVE-2026-53412 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-53412 being exploited in the wild.

**How severe is CVE-2026-53412?** Critical severity, with a CVSS score of 9.8, published 16 July 2026.

**Which products and versions are affected?** Zoom Workplace before 7.0.0; Zoom Workplace VDI Client before 7.0.10, 6.6.15, and 6.5.18.

**Is there a fix for CVE-2026-53412?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-53412 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-53412?** Check whether you run Zoom Workplace or Zoom Workplace VDI Client at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An improper input validation vulnerability (CWE-20) exists in the Zoom Desktop Client and VDI Client for Windows. The flaw allows a remote, unauthenticated attacker to perform an account takeover via network-based vectors without requiring any user interaction. While the specific protocol or input field is not detailed in the advisory, the CVSS vector indicates a low attack complexity and high impact on confidentiality, integrity, and availability. Users are advised to update to Zoom Workplace for Windows version 7.0.0 or later, and corresponding patched versions for the VDI client. Note that the Meeting SDK was initially listed but later removed from the affected products list by the vendor.

## Affected products

- Zoom Workplace for Windows before 7.0.0
- Zoom Workplace VDI Client for Windows before 7.0.10, 6.6.15, and 6.5.18

## Timeline

- 2026-07-14: advisory: Initial publication by Zoom (ZSB-26014)
- 2026-07-15: other: Advisory updated to remove Meeting SDK from affected products
- 2026-07-16: disclosed: CVE published to NVD dataset

## References

- [https://www.zoom.com/en/trust/security-bulletin/zsb-26014](https://www.zoom.com/en/trust/security-bulletin/zsb-26014)

## Related threats

- [Zoom Clients use-after-free in annotator function](https://junglewise.ai/threats/cve-2026-53415-zoom-clients-use-after-free-in-annotator-function)
- [Zoom Workplace improper authorization in custom URL scheme handler](https://junglewise.ai/threats/cve-2026-53408-zoom-workplace-improper-authorization-in-custom-url-scheme)
- [Zoom Workplace improper authorization in custom URL scheme handler](https://junglewise.ai/threats/cve-2026-53407-zoom-workplace-improper-authorization-in-custom-url-scheme)
- [Zoom Workplace for iOS protection mechanism failure](https://junglewise.ai/threats/cve-2026-30904-zoom-workplace-for-ios-protection-mechanism-failure)
- [Zoom Clients for Windows privilege escalation](https://junglewise.ai/threats/cve-2026-30902-zoom-clients-for-windows-privilege-escalation)