VULNERABILITY INTELLIGENCE
CVE-2026-53414
CVSS score6.5 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2026-08-11
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.
Weakness classification
- security@zoom.us: CWE-126