Zoom Communications Vulnerabilities and Affected Products
Vulnerabilities associated with Zoom Workplace VDI Plugin.
Products
Clear product- Zoom Clients4 vulnerabilities
- Zoom Workplace4 vulnerabilities
- Zoom Rooms2 vulnerabilities
- Zoom Workplace VDI Plugin2 vulnerabilities
- Remote Control for Zoom Contact Center1 vulnerability
- Zoom VDI1 vulnerability
- Zoom Workplace for Windows1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-53411HIGH | Zoom Workplace VDI Plugin for Windows - Improper Input ValidationA time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges. CWE-20Jul 16, 2026 | CVSS7.8v3.1 | EPSS0.132% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-30905HIGH | Generated title:Zoom Workplace VDI Plugin Windows Universal Installer External Control of File Name or Path Privilege EscalationExternal Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local access. | CVSS7.8v3.1 | EPSS0.118% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |