Zoom: >> Workplace Virtual Desktop Infrastructure >> 6.5.13 Security Vulnerabilities
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.
CVSS Score
9.8
EPSS Score
0.006
Published
2026-07-16
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-07-16