Security AffairsPierluigi Paganini
Zoom patches critical zero click flaw Zoomsday threatening meetings
Part of the CVE-2026-53413 story · since 11 Aug
- Tue 11 Aug, 16:02 UTC. SecurityWeek, first report. Zoom Patches Zero-Click Code Execution Vulnerability.
- Tue 11 Aug, 18:21 UTC. Security Affairs, its first report on the story. Zoom patches critical zero click flaw Zoomsday threatening meetings. This article, 2nd of 4.
- Wed 12 Aug, 02:31 UTC. SecurityOnline, its first report on the story. Zoom fixes two remote code execution bugs in annotator function.
- Wed 12 Aug, 15:18 UTC. Malwarebytes, its first report on the story. Zoom patches critical annotation flaws after Zoomsday discovery.
Zoom has released patches for several vulnerabilities, including a critical zero-click flaw labeled "Zoomsday" (CVE-2026-53413) linked to its annotation feature. This vulnerability allows an attacker to execute code on another participant's device during a meeting without any user interaction. The flaws potentially enable data theft, activation of microphones and cameras, and malware installation.
A Security, which discovered the vulnerabilities, highlighted the risks posed by the annotation protocol and called attention to additional issues including CVE-2026-53414 and CVE-2026-53415. Zoom has begun rolling out security updates to mitigate these risks across all supported platforms.
How the story developed
4 articles from 4 outlets since 11 Aug. Quiet since 12 Aug. This was the 2nd report, 2 hours after the first.
- Tue 11 Aug, 16:02 UTC. SecurityWeek, first report. Zoom Patches Zero-Click Code Execution Vulnerability.
- Tue 11 Aug, 18:21 UTC. Security Affairs, its first report on the story. Zoom patches critical zero click flaw Zoomsday threatening meetings. This article, 2nd of 4.
- Wed 12 Aug, 02:31 UTC. SecurityOnline, its first report on the story. Zoom fixes two remote code execution bugs in annotator function.
- Wed 12 Aug, 15:18 UTC. Malwarebytes, its first report on the story. Zoom patches critical annotation flaws after Zoomsday discovery.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 4 articles as a listHide the list
- Tue 11 AugDay 02
- Zoom Patches Zero-Click Code Execution Vulnerability16:02 · SecurityWeek · First report
- Zoom patches critical zero click flaw Zoomsday threatening meetings18:21 · Security Affairs · This article, 2nd of 4
- Wed 12 AugDay 12
- Zoom fixes two remote code execution bugs in annotator function02:31 · SecurityOnline
- Zoom patches critical annotation flaws after Zoomsday discovery15:18 · Malwarebytes