CVE-2026-53413

Zoom Clients - Buffer Over-write

Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.

Affected

Zoom Communications · Zoom Clients

CVSS v3.1 ZOOM

8.3 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

0.49% chance of exploitation in the next 30 days, 41st percentile

Published

2026-08-11

Updated

2026-08-12

Proof-of-concept exploits (1)

• HORKimhab/CVE-2026-534130★ · 2026-08-13

References

• CVE Record
• NVD entry