WID-SEC-W-2026-2353

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Zoom Video Communications Rooms: Mehrere Schwachstellen

view advisory published 2026-07-14

Ein Angreifer kann mehrere Schwachstellen in Zoom Video Communications Rooms und Zoom Video Communications Workplace ausnutzen, um seine Privilegien zu erhöhen und die Kontrolle über ein Konto zu übernehmen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2026-53412US——
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account…
CVE-2026-53411UShigh7.0—
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to…
CVE-2026-53410US——
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to…
CVE-2026-53409US——
Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan