VULNERABILITY INTELLIGENCE

CVE-2026-53407

CVSS score8.1 HIGH
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-06-12
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

Weakness classification

  • security@zoom.us: CWE-939

Primary references