Critical Vulnerability in Zoom for Windows: Hackers Can Take Over Accounts via the Network

Zoom has responded urgently to the discovery of a serious vulnerability affecting users of its software on Windows. Although the full technical details have not been disclosed, the platform confirmed that the issue is extremely dangerous, as it allows hackers to take control of accounts via the internet without requiring physical access to the device.

The vulnerability, identified by the number CVE-2026-53412, is classified as critical with a CVSS score of 9.8. The problem is due to improper input validation – the software accepts malicious commands that alter its normal behavior, which can lead to bypassing security measures or remote code execution.

Who is affected?
According to Zoom's official security bulletin, the vulnerability affects the following versions:

• Zoom Workplace for Windows: versions prior to 7.0.0;
• Zoom Workplace VDI Client for Windows: versions prior to 7.0.10, 6.6.15, and 6.5.18;
• Zoom Meeting SDK for Windows: versions prior to 7.0.0.

How to protect yourself?
The only secure way to protect yourself is to immediately update the application to the latest available version. Users can download the patch from the official Zoom website. Corporate users and IT administrators should ensure that their centralized installations are updated to prevent the reappearance of vulnerable versions during subsequent deployment cycles.