Vulnerability intelligence
CVE-2026-53412
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
0.5%
Riskier than 42% of all CVEs · checked 2026-09-25
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
2 articles across 2 outlets · first covered Jul 16, 2026 · latest Jul 16, 2026
Coverage timeline
-
Splunk and Zoom patch critical flaws, including CVE-2026-53412www.securityweek.com · Jul 16, 2026
-
Zoom patches critical Windows account takeover flaw CVE-2026-53412securityaffairs.com · Jul 16, 2026