CVE-2026-53418

HighCVSS 8.1

Published: 13/10/2026(UTC)Updated: 14/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

13th percentile - higher than 13% of all known CVEs

Summary

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Risk Assessment

An attacker could exploit the vulnerability to escalate privileges and potentially take over the application or data. This may lead to confidentiality and integrity breaches.

Recommendation

Update Zoom Workplace for Android to version 7.2.1 or later. Avoid clicking unknown links that trigger custom URL schemes.

Other vulnerabilities in Zoom Workplace for Android

CVE-2025-64741High
Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Original NVD description (English source)

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS