Skip to content
OpenAdvisories
High WID-SEC-2026-2353 4 CVEs

Zoom Video Communications Rooms: Mehrere Schwachstellen

Published Jul 14, 2026 · Updated Jul 16, 2026 · Revision 2 · de-DE

Vendor: Zoom Video Communications Product: Rooms Product: Workplace Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Zoom Video Communications Rooms und Zoom Video Communications Workplace ausnutzen, um seine Privilegien zu erhöhen und die Kontrolle über ein Konto zu übernehmen.

Product

Zoom Rooms ist ein softwarebasiertes Raumsystem, das integrierte Audiokonferenzen, drahtlose Bildschirmfreigabe und Videokonferenzen ermöglicht.
Zoom Workplace ist eine Plattform, die Videokonferenz-, Chat-, Telefon- und Collaboration-Tools integriert, um Remote- und Hybrid-Arbeitsumgebungen in Unternehmen zu unterstützen.

Vulnerabilities 4

  • Critical 9.8
    CVE-2026-53412

    Zoom Workplace VDI Plugin for Windows - Improper Input Validation

    Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

    Zoom Communications Zoom Workplace for Windows Windows
  • High 7.8
    CVE-2026-53409

    Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct…

    Zoom Communications Zoom Rooms
  • High 7.8
    CVE-2026-53411

    Zoom Workplace VDI Plugin for Windows - Improper Input Validation

    A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

    Zoom Communications Zoom Workplace VDI Plugin
  • High 7.0
    CVE-2026-53410

    Zoom Clients for Windows - Race Condition

    A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

    Zoom Communications Zoom Clients

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-45048, EUVD-2026-45046, EUVD-2026-45045, EUVD-2026-45044

  2. #1

    Initiale Fassung

References