9.8
CVE-2026-53412
- EPSS 0.65%
- Veröffentlicht 16.07.2026 21:15:25
- Zuletzt bearbeitet 11.08.2026 23:59:07
- CVE-Watchlists
- Unerledigt
Zoom Workplace VDI Plugin for Windows - Improper Input Validation
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zoom ≫ Workplace Desktop SwPlatformwindows Version < 7.0.0
Zoom ≫ Workplace Virtual Desktop Infrastructure SwPlatformwindows Version >= 6.5.0 < 6.5.18
Zoom ≫ Workplace Virtual Desktop Infrastructure SwPlatformwindows Version >= 6.6.0 < 6.6.15
Zoom ≫ Workplace Virtual Desktop Infrastructure SwPlatformwindows Version >= 7.0.0 < 7.0.10
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.65% | 0.472 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| security@zoom.us | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://www.zoom.com/en/trust/security-bulletin/zsb-26014