Critical Zoom Vulnerability Allows Unauthenticated Account Takeover
ID: eb18b33e-e3e7-5771-86d7-6d30c32258c3
STIX ID: report--eb18b33e-e3e7-5771-86d7-6d30c32258c3
Feed Name: ThreatCluster
Threat Score
Zoom released a security advisory for CVE-2026-53412, a critical (CVSS 9.8) input-validation flaw in its Windows desktop and VDI clients that could permit unauthenticated network-based account takeover; organizations are urged to apply the update immediately, and additional vulnerabilities (including privilege escalation) were also patched, with no active exploitation reported.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.