Zoom patches critical security flaw which could have let hackers hijack accounts

Zoom Verified on LinkedIn Example.

• Zoom patches critical improper input validation flaw in multiple Windows clients and SDKs that allowed remote account takeover
• Additional high‑severity bugs fixed include CVE‑2026‑53410 (TOCTOU race condition), CVE‑2026‑53409 (privilege management flaw), and CVE‑2026‑53411 (input validation issue)
• All vulnerabilities were found internally, with no evidence of exploitation; users are urged to update Zoom Workplace and related products to the latest versions

Zoom has patched a critical-level vulnerability in multiple products that allowed threat actors to take over people’s accounts remotely.