CVE-2026-53410: Zoom Remote Control For Zoom Contact Center

High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days.

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

Affected products

• Zoom Remote Control For Zoom Contact Center: before 7.0.0 (fixed in 7.0.0)
• Zoom Rooms: before 7.0.5 (fixed in 7.0.5)
• Zoom Workplace Desktop: before 7.0.5 (fixed in 7.0.5)
• Zoom Workplace Virtual Desktop Infrastructure: before 6.5.17 (fixed in 6.5.17); from 6.6.0, before 6.6.14 (fixed in 6.6.14)

Published 2026-07-16. Last modified 2026-08-17.