CVE-2026-53407
Received Received - Intake
Improper Authorization in Zoom Workplace Mobile Apps

Publication date: 2026-06-12

Last updated on: 2026-06-12

Assigner: Zoom Video Communications, Inc.

Description
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-12
Last Modified
2026-06-12
Generated
2026-06-13
AI Q&A
2026-06-12
EPSS Evaluated
N/A
NVD
CVE-2026-53407
EUVD
EUVD-2026-36522
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
zoom workplace to 7.0.4 (exc)
zoom workplace to 7.0.3 (exc)
zoom meeting_sdk *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-939 The product uses a handler for a custom URL scheme, but it does not properly restrict which actors can invoke the handler using the scheme.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-53407 is a high-severity vulnerability affecting Zoom Workplace mobile clients on Android and iOS platforms. It involves improper authorization in the handler for custom URL schemes, which means that the application does not correctly verify permissions when processing certain types of URLs.

This flaw allows an unauthenticated attacker to escalate their privileges via network access, potentially gaining higher-level access than intended.

Impact Analysis

This vulnerability can allow an attacker who is not authenticated to escalate their privileges within the Zoom Workplace mobile application. This means the attacker could gain unauthorized access to features or data that should be restricted.

Such unauthorized privilege escalation could lead to compromise of sensitive information or unauthorized actions within the app, posing significant security risks to users and organizations.

Mitigation Strategies

To mitigate this vulnerability, users should update their Zoom Workplace mobile clients to the latest versions.

  • For Android, update to version 7.0.4 or later.
  • For iOS, update to version 7.0.3 or later.

Updating the Zoom Meeting SDK for both platforms to the latest versions is also advised.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53407. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart