CVE-2026-53410

Description

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

Traduire en français

Produits concernés

• Zoom Communications Zoom Clients
• Zoom remote control for zoom contact center
• Zoom rooms
• Zoom workplace desktop
• Zoom workplace virtual desktop infrastructure

Scores CVSS

Faiblesses (CWE)

• CWE-367

Références

• https://www.zoom.com/en/trust/security-bulletin/zsb-26012 Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories