CVE-2026-53411

Zoom Workplace VDI Plugin for Windows - Improper Input Validation PUBLISHED

Description (CNA)

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

Affected (CNA)

Vendor / product	Versions
Zoom Communications / Zoom Workplace VDI Plugin	affected 0 before 6.6.14

CWE

CWE-20

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26013

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.