CVE-2026-53414
Received Received - Intake

Buffer Over-Read in Zoom Client Annotator

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: Zoom Video Communications, Inc.

Description
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-53414
EUVD
EUVD-2026-56244

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
zoom workplace to 7.0.6 (exc)
zoom workplace_vdi_client to 6.6.16 (exc)
zoom rooms to 7.1.0 (exc)
zoom meeting_sdk to 7.1.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-126 The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a buffer over-read caused by a missing bounds check in the annotator function of Zoom Clients. It allows a meeting participant to exploit network access and cause a denial of service for another participant.

Detection Guidance

Detection involves checking Zoom client versions. For Windows, run: wmic product where "name like 'Zoom%'"

On macOS/Linux, check installed packages: zoom --version or dpkg -l | grep zoom. Compare versions against affected releases.

Impact Analysis

If exploited, this vulnerability could disrupt your Zoom meetings by causing a denial of service, preventing you from participating normally. It requires network access and could be triggered by another meeting participant.

Mitigation Strategies

Update Zoom clients immediately. For Workplace, upgrade to 7.1.5 or 7.0.6. For VDI Client, use 7.0.11 or 6.6.16. Rooms and SDK require 7.1.0.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53414. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart