LIVE FEED
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider
CRITICAL CWE-20

CVE-2026-53412

Zoom Workplace VDI Plugin for Windows - Improper Input Validation

Zoom·Workplace for Windows

9.8/ 10
CVSS 3.1
Critical severity
0.53%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 45% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
Published
Jul 16, 2026
Updated
Jul 17, 2026
First covered
Jul 15, 2026
Latest story
4 months ago

Summary

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

CWE-20Improper input validation

Attack profile

Attack vectorNetwork
ComplexityLow
PrivilegesNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Zoom Workplace for Windowsbefore 7.0.0

References

CVE.org recordcve.org NVD entrynvd.nist.gov Advisoryzoom.com
Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed