Zoom fixes two remote code execution bugs in annotator function

ON August 11, 2026, Zoom announced four security vulnerabilities, including two that allow remote code execution. The flaws, identified as CVE-2026-53413 and CVE-2026-53415, are particularly severe with CVSS scores of 8.3. Affected users are urged to update to the latest version (7.0.11) as patches are available. The vulnerabilities stem from issues in the annotator function, which fails to properly check memory bounds. Although there are no confirmed exploitations, the risk of remote attacks emphasizes the importance of swift updates.