CVE-2026-53412 Zoom Workplace VDI Plugin for Windows - Improper Input Validation

What is CVE-2026-53412?

CVE-2026-53412 is a critical vulnerability in Zoom Workplace Desktop, published on 16 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

Weakness: CWE-20

Which versions are affected by CVE-2026-53412?

It affects 2 products.

Products include Zoom Workplace Desktop, Zoom Workplace Virtual Desktop Infrastructure.

How do I fix CVE-2026-53412?

No fix has been published for CVE-2026-53412 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-53412 being exploited?

There is no known exploitation of CVE-2026-53412 in the wild and no public exploit code.

Other vulnerabilities in Zoom Workplace Desktop

• CVE-2026-30903 Path traversal in Zoom Workplace Critical 9.6
• CVE-2025-46788 Zoom Workplace for Linux - Improper Certificate Validation High 7.4
• CVE-2024-39820 Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element Medium 6.6
• CVE-2024-39827 Zoom Workplace Desktop App for Windows - Improper Input Validation Medium 5.5

All Zoom Workplace Desktop vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xq34-4qgv-ggmc.