Zoom Patches Critical Windows Flaw That Could Enable Account Takeover

Zoom has patched a critical vulnerability, CVE-2026-53412, in its Windows clients that could allow unauthenticated remote attackers to perform account takeover via improper input validation. Additionally, three high-severity vulnerabilities related to privilege escalation were addressed in various Zoom products for Windows. There is no evidence of active exploitation in the wild. Users are advised to update to the latest versions to mitigate these risks.

AI-extracted · verify before operational use