Zoom

The provider Zoom is warning of several critical security vulnerabilities (incl. CVE-2026-53413, "Zoomsday", CVSS 8.3). These vulnerabilities allow attackers to execute malicious code on the devices of other participants during an ongoing meeting via the annotation feature without any user interaction (zero-click). This can happen unnoticed and result in the theft of personal data or the activation of microphones and cameras.

Affected are all common Zoom clients for Windows, MacOS, iOS, Android, and Linux up to and including version 7.0.5.

Recommended Action: We ask all users to immediately update their Zoom software to the latest available version (Zoom Workplace version 7.1.5 or 7.0.6 or newer), as these releases patch the vulnerabilities.