Skip to content
OpenAdvisories
High · 7.8 CVE-2026-53411 EUVD-2026-45046GHSA-58pc-566f-r6jx

Zoom Workplace VDI Plugin for Windows - Improper Input Validation

Published Jul 16, 2026 · Updated Jul 17, 2026 · Assigned by Zoom

Description

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

Affected products

VendorProductAffectedFixed
Zoom Communications Zoom Workplace VDI Plugin < 6.6.14 6.6.14

Advisories 2

References