Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-53411

Zoom Workplace VDI Plugin for Windows - Improper Input Validation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zoom

Description

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zoom Communications Zoom Workplace VDI Plugin

Default version status: unaffected

  • 0 to < 6.6.14affected

References