Skip to content
Sign in
CVE-2026-534146.5MediumCWE-126

CVE-2026-53414: Zoom Clients - Buffer Over-read

Zoom Communications · Zoom Clients

No fix listed · Affected: Zoom Communications Zoom Clients · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)

  1. In CISA KEV: not seen
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public: not seen
  5. Not establishedNothing in the sources we check
0.4%probability of exploitation in the next 30 days
29th percentile
050100

Higher than 29% of scored CVEs

6.5MediumCVSS 3.1
LowMedium

DescriptionNVD

Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.

Coverage3 articles · 3 outlets

One row per outlet, in order of first report. First in our coverage: SecurityWeek, 11 Aug.

Full timeline
Quiet for 13 weekslast report 12 Aug3 articles3 outlets
11 Aug · SecurityWeek first28 Sep14 OctNow
  • Tue 11 Aug, 16:02 UTC. SecurityWeek, first report. Zoom Patches Zero-Click Code Execution Vulnerability.
  • Tue 11 Aug, 18:21 UTC. Security Affairs, its first report on the story. Zoom patches critical zero click flaw Zoomsday threatening meetings.
  • Wed 12 Aug, 15:18 UTC. Malwarebytes, its first report on the story. Zoom patches critical annotation flaws after Zoomsday discovery.
All coveragerunning total3SecurityWeek1Security Af…1Malwarebytes112 Aug12 Sep13 OctNow
  • First report
  • Article
  • Running total
Show as table
3 articles about CVE-2026-53414 from 3 outlets
Published (UTC)OutletHeadline
11 Aug 16:02SecurityWeekZoom Patches Zero-Click Code Execution Vulnerability
11 Aug 18:21Security AffairsZoom patches critical zero click flaw Zoomsday threatening meetings
12 Aug 15:18MalwarebytesZoom patches critical annotation flaws after Zoomsday discovery
  1. Zoom patches critical annotation flaws after Zoomsday discovery
    Malwarebytes · mentions it in passing
  2. Zoom patches critical zero click flaw Zoomsday threatening meetings
    Security Affairs · mentions it in passing
  3. Zoom Patches Zero-Click Code Execution Vulnerability
    SecurityWeek · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in