CVE Catalog
CVE-2026-53413
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk0.41%
34th percentile - higher than 34% of all known CVEs
Summary
Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.
Risk Assessment
An attacker participant can take control of another participant's computer, potentially leading to data theft or further attacks.
Recommendation
Update Zoom Clients to the latest version containing the fix.
Original NVD description (English source)
Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.