- Description
- Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.
- Source
- security@zoom.us
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 6.5
- Impact score
- 3.6
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Severity
- MEDIUM
- security@zoom.us
- CWE-126
- Hype score
- Not currently trending
CyberSec Daily ✓ · 🚨 Critical Update · August 15, 2026 🎯 Zoom users urged to update after high-severity client vulnerabilities Zoom has updated advisories for CVE-2026-53413, CVE-2026-53414 and CVE-2026-53415, covering memory-safety weaknesses in Zoom clients. Securi
@XQOPTRX
15 Aug 2026
34 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Zoomの注釈機能に複数の脆弱性、会議参加者同士が互いのクライアントを乗っ取り可能な状態(CVE-2026-53413、CVE-2026-53414、CVE-2026-53415) https://t.co/Zt8gbqAWGS #セキュリティ対策Lab #security #securitynews #脆弱性
@securityLab_jp
12 Aug 2026
157 Impressions
1 Retweet
1 Like
0 Bookmarks
0 Replies
0 Quotes
AI-assisted research identified critical Zoom annotation vulnerabilities enabling zero-click remote code execution against meeting participants across supported native clients. CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415. #threatintel #cybersec #vulnerability
@LandscapeThreat
11 Aug 2026
37 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes