CVEvulnerability
CVE-2026-53407
9.8 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2026-06-12
- Last modified
- 2026-10-25
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-939
Description
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.
Affected configurations
• zoom workplace (< 7.0.3)
• zoom workplace (< 7.0.4)
Related
Weakness · CWE (1)
- CWE-939 Improper Authorization in Handler for Custom URL Scheme weakness
References
- https://www.zoom.com/en/trust/security-bulletin/zsb-26010 Vendor Advisory