ZOOM has addressed a critical vulnerability, tracked as CVE-2026-53412, which allows unauthenticated attackers to take over user accounts on Windows systems with a CVSS score of 9.8. This flaw affects older versions of the Zoom Desktop Client, VDI Client, and Meeting SDK for Windows. Users are urged to update to the latest versions immediately.
Additionally, several other vulnerabilities were reported, including CVE-2026-53410, CVE-2026-53409, and CVE-2026-53411, all with CVSS scores of 8.8, posing risks of privilege escalation. None of these vulnerabilities are under active exploitation.