CVE-2026-53411: Zoom Workplace Virtual Desktop Infrastructure

High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days.

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

Affected products

• Zoom Workplace Virtual Desktop Infrastructure: before 6.6.14 (fixed in 6.6.14)

Published 2026-07-16. Last modified 2026-08-12.