CVE-2026-53415

HIGH

Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access.

CVSS v3.1 Score

8.3
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
HIGH
Privileges
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 8/11/2026Modified: 8/13/2026

Related Intelligence (1)

LOWAi

Zoom zero-click RCE flaws allow attackers to compromise meeting participants

Zoom has fixed four vulnerabilities across its applications, including two that could allow attackers who join a meeting to execute malicious code on the systems of all other meeting participants with no interaction required from them. Three of the vulnerabilities affect all Zoom client applications for all platforms before versions 7.1.5 and 7.0.6, while the fourth impacts Zoom Workplace VDI Clie

CVE-2026-53413CVE-2026-53415
CSO Online

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-26017