Kritik CVSS 9.8
CVE-2026-53412: Workplace Desktop: hatalı girdi doğrulama
Açıklama (NVD)
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.
Özet bilgiler
- Ürün
- Zoom Workplace Desktop
- CVSS v3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,53 (yüzdelik 45)
- CWE
- CWE-20
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| zoom-workplace-desktop | — | — | 7.0.0 |
| zoom-workplace-virtual-desktop-infrastructure | 6.5.0 | — | 6.5.18 |
| zoom-workplace-virtual-desktop-infrastructure | 6.6.0 | — | 6.6.15 |
| zoom-workplace-virtual-desktop-infrastructure | 7.0.0 | — | 7.0.10 |