Zoom Patches Critical Flaw Allowing Remote Account Takeover

Zoom has released emergency security updates to address a critical vulnerability in several of its Windows products that could allow an unauthenticated attacker to take control of a user’s account over a network.

The vulnerability, tracked as CVE-2026-53412, affects the Zoom Workplace desktop application, the company’s Virtual Desktop Infrastructure client and the Zoom Meeting SDK for Windows. It carries a CVSS severity score of 9.8 out of 10, placing it near the top of the critical range.