Critical Zoom Workplace Flaw Lets Unauthenticated Attackers Take Over Accounts

**Executive Summary:** Zoom disclosed a critical input-validation vulnerability (CVE-2026-53412) in its Windows Desktop and VDI clients that allows unauthenticated, network-based, zero-click account takeover (CVSS 9.8). Organizations are advised to update affected Windows clients immediately, prioritize VDI environments, and monitor account activity logs after the disclosure; Zoom later revised the bulletin to remove the Meeting SDK from the affected products list.