Buffer Overwrite Vulnerability in Zoom Clients by Zoom
CVE-2026-53413

8.3HIGH

Key Information:

Vendor

Zoom Communications

Status
Zoom Clients
Vendor
CVE Published:
11 August 2026

What is CVE-2026-53413?

A buffer overwrite vulnerability exists in the annotator function of Zoom Clients, enabling a malicious meeting participant to execute arbitrary code on another participant's device by exploiting this flaw via network access. This security concern underscores the importance of keeping Zoom Clients up to date to mitigate potential risks associated with remote code execution.

Affected Version(s)

Zoom Clients Windows see references

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26015

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.