CVE-2026-53414
Zoom Clients - Buffer Over-read
CVSS score
6.5
EPSS probability
%0.4
Risk score
0.0
Published
2 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the victim beyond being in the meeting. No click, no download, no prompt, and nothing on screen to show it
Similar Vulnerabilities
8.3
CVE-2026-53415Zoom Clients - Use After Free
Patch status unknownEPSS %0
8.3
CVE-2026-53413Zoom Clients - Buffer Over-write
Patch status unknown Public Exploits:1EPSS %0
8.0
8.1
7.1
CVE-2026-53416Zoom VDI - Path Traversal
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-53414"