CVE-2026-53416

HIGH

Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access.

CVSS v3.1 Score

7.1
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE
Published: 8/11/2026Modified: 8/11/2026

Related Intelligence (1)

LOWAi

Zoom zero-click RCE flaws allow attackers to compromise meeting participants

Zoom has fixed four vulnerabilities across its applications, including two that could allow attackers who join a meeting to execute malicious code on the systems of all other meeting participants with no interaction required from them. Three of the vulnerabilities affect all Zoom client applications for all platforms before versions 7.1.5 and 7.0.6, while the fourth impacts Zoom Workplace VDI Clie

CVE-2026-53413CVE-2026-53415
CSO Online

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-26017