Zoom

The provider Zoom is warning of several critical security vulnerabilities (incl. CVE-2026-53413, "Zoomsday", CVSS 8.3). These vulnerabilities allow attackers to execute malicious code on the devices of other participants during an ongoing meeting via the annotation feature without any user interaction (zero-click). This can happen unnoticed and result in the theft of personal data or the activation of microphones and cameras.

Affected are all common Zoom clients for Windows, MacOS, iOS, Android, and Linux up to and including version 7.0.5.

Recommended Action: We ask all users to immediately update their Zoom software to the latest available version (Zoom Workplace version 7.1.5 or 7.0.6 or newer), as these releases patch the vulnerabilities.

Starting July 31, 2026, Zoom licenses will be managed by the IT Center. From that date on, please direct any questions regarding Zoom licenses (e.g., login issues) to servicedesk@itc.rwth-aachen.de.