Zoom Patches Critical Windows Flaw Rated 9.8 That Allowed Account Takeovers
Zoom has patched CVE-2026-53412, a vulnerability rated 9.8 on its Windows desktop client, VDI platform, and meeting SDK that allowed unauthenticated attackers to take over accounts over the network.
The flaw impacts the company's desktop and virtual desktop software products. A security update has been released to address the issue, with version details and remediation steps published online.
From the sources (5 posts)
@alvieridRT @BleepinComputer: Zoom warns of critical account takeover vulnerability
@cyberalertshq🚨 CRITICAL SECURITY ALERT: Zoom is warning users about a critical account takeover vulnerability that could allow attackers to gain unauthorized access to affected accounts. Collaboration platforms have become high-value targets because th
@trubetechZoom warns of critical account takeover vulnerability in Windows desktop client and SDK. An unauthenticated attacker could hijack accounts via this flaw. Read more to understand impact, affected versions, and remediation steps. https://t.co
@thehackersnews🚨 Zoom has patched a 9.8-rated Windows flaw that could let an unauthenticated attacker take over accounts via network access. CVE-2026-53412 affects the Desktop Client, VDI Client, and Meeting SDK. Affected versions and update details: ht
@securityaffairs#Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug #securityaffairs #hacking