Zoom Warns of Critical Account Takeover Vulnerability

2026-07-17

Zoom is warning about a critical vulnerability (CVSS score 9.8/10) in its desktop client and SDK for Windows. The vulnerability stems from improper input validation and can be exploited by unauthenticated, remote attackers to take over accounts. Zoom has released updates addressing the vulnerability and has not seen any indicators of its exploitation.