Loading vulnerability…
CVE-2026-53412 is a critical improper input validation vulnerability in Zoom Workplace (Desktop Client) for Windows and Zoom Workplace VDI Client for Windows. Crafted network-supplied input or parameters are insufficiently validated, allowing an unauthenticated remote attacker to conduct account takeover. The revised vendor advisory removed Zoom Meeting SDK for Windows from the affected-product list. Affected releases include Zoom Workplace for Windows before 7.0.0 and Zoom Workplace VDI Client for Windows before 7.0.10, 6.6.15, or 6.5.18, according to the applicable release branch.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
76 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A critical improper input validation vulnerability in Zoom Workplace for Windows that can allow unauthenticated network attackers to take over Zoom accounts without credentials or user interaction.
Critical improper input validation vulnerability in Zoom Desktop Client for Windows that could allow an unauthenticated remote attacker to send crafted input or parameters, compromise a user account, and take control of it.
A critical improper input validation vulnerability that allows unauthenticated network-based account takeover in Zoom Windows clients.
An improper input validation vulnerability affecting Zoom Workplace and Zoom Workplace VDI Client.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.