Zoom warns of critical account takeover vulnerability

Zoom disclosed a critical improper input validation vulnerability (CVE-2026-53412, CVSS 9.8) affecting Zoom Workplace for Windows, Windows VDI clients, and the Meeting SDK that could permit an unauthenticated attacker to take over accounts via network access; vendor patches are available and users are advised to update. The advisory also fixes several high-severity local privilege escalation and input validation flaws, and Zoom reported no evidence of in-the-wild exploitation.