CVE Catalog
CVE-2026-53414
MediumCVSS 6.5Summary
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.
Risk Assessment
Risk of disruption of Zoom client functionality for another participant, potentially disrupting meetings and communication. The attack requires participation in a meeting and network access.
Recommendation
Update Zoom Client to the latest patched version. Restrict annotation sharing to trusted participants.
Original NVD description (English source)
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.