Zoom Patches Critical Windows Flaw That Could Enable Account Takeover

Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover. The vulnerability, tracked as CVE-2026-53412 CVSS score: 9.8, affects Zoom Workplace for Windows before version 7.0.0 and Zoom Workplace VDI Client for...

PT-2026-60396

A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges...

CVE-2026-50474

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-50330

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-54990

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-58594 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-58594

CVE-2026-58594 is a Windows Remote Desktop Client RCE vulnerability caused by an integer overflow/wraparound in the RDP client. Public sources (NVD/NCSC/CIRCL) attribute network-based exploitation with potential arbitrary code execution on vulnerable Windows systems. Connected entries confirm the...

CVE-2026-58539

CVE-2026-58539 is a Windows Remote Desktop Client/RDP vulnerability described as an out-of-bounds read that could allow an unauthenticated attacker to disclose information over a network. The connected documents corroborate this as a Windows RDP/Remote Desktop Client issue with public advisories ...

CVE-2026-58546 Windows Remote Desktop Client Information Disclosure Vulnerability

...

CVE-2026-58535 Windows Remote Desktop Client Information Disclosure Vulnerability

...

CVE-2026-58535

CVE-2026-58535 affects Windows Remote Desktop Client. Root cause: use of an uninitialized resource in Windows RDP, enabling an attacker to disclose information over the network. Impact: information disclosure with CVSS v3.1 base score 6.5 (NETWORK, USER INTERACTION required). Microsoft has releas...

CVE-2026-58533

CVE-2026-58533 is a Windows Remote Desktop Client Information Disclosure vulnerability. The available sources describe an uninitialized resource in Windows RDP that could allow an unauthenticated attacker to disclose information over the network. Affected context is centered on the Windows Remote...

CVE-2026-58535 Windows Remote Desktop Client Information Disclosure Vulnerability

...

CVE-2026-58533 Windows Remote Desktop Client Information Disclosure Vulnerability

...

CVE-2026-50504 Windows Remote Desktop Client Information Disclosure Vulnerability

...

CVE-2026-50504

CVE-2026-50504 is a Buffer over-read in the Windows Remote Desktop Client that allows an unauthorized attacker to disclose information over a network. The issue affects the Remote Desktop Client and is triggered by a network-accessible condition, with no privileges required but user interaction n...

CVE-2026-50474 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability

...

CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability

...

CVE-2026-50330

CVE-2026-50330 describes a heap-based buffer overflow in the Windows Remote Desktop Client that allows an unauthenticated attacker to elevate privileges over the network. The vulnerability is categorized as a high-severity (CVSS 7.5) issue with network access and no user interaction required. Pub...