CVE-2026-53415

CVE-2026-53415 is a use-after-free vulnerability (CWE-416) in the annotator function of Zoom Clients, scored 8.3 (High) with a network attack vector and changed scope. It is triggered when one meeting participant sends crafted annotation input that another participant's Zoom client processes, allowing an attacker in the meeting to corrupt memory in a fellow attendee's client; the CVSS vector marks user interaction as required and attack complexity as high, while press coverage describes the flaw as zero-click for the victim. A successful attack yields remote code execution on the other participant's client, with high impact to confidentiality, integrity, and availability. Anyone using Zoom Clients who joins meetings with untrusted participants where annotation is available is potentially affected. Exploitation status: not in CISA KEV, no public PoC, EPSS estimates only a 0.5% probability of exploitation in the next 30 days (44th percentile), and Zoom has already patched the flaw.

What to do: Update all Zoom desktop and mobile clients to the latest patched release per Zoom's advisory for CVE-2026-53415 (the source data does not list specific fixed version numbers). As an interim mitigation, restrict or disable participant annotation in meeting settings, and prioritize updates for users who routinely join meetings with external or untrusted participants. Check Zoom's bulletin for the fixed version applicable to each client platform in your fleet.