PT-2026-60396 · Zoom Communications · Zoom Workplace Vdi Plugin

CVE-2026-53411 · Publicado 2026-07-15 · Atualizado 2026-07-16

Mitre

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2026-53411

Produtos afetados

Zoom Workplace Vdi Plugin

Referências · 3

• https://zoom.com/en/trust/security-bulletin/zsb-26013 · Nota
• https://twitter.com/rtehrani/status/2077531963812876763 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-53411 · Nota de Segurança