A critical security vulnerability exists in Zoom's Windows desktop client and SDK that could be exploited by an unauthenticated attacker to perform account takeover. The vulnerability allows hijacking of user accounts, potentially compromising user access and data. The specific technical details and affected versions have not been disclosed. No patch or official remediation guidance is currently available from the vendor. The vulnerability has been publicly reported by Bleeping Computer but lacks detailed CVE or vendor advisory information.

Successful exploitation could result in unauthorized access to Zoom user accounts on Windows platforms, leading to potential misuse of account privileges and exposure of sensitive information. The vulnerability is classified as critical due to the account takeover risk. No evidence of active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor Zoom's official communications for updates and apply patches promptly once available. No specific mitigation steps are provided in the current data.