CVE-2026-53413: Zoom Communications Zoom Clients

High severity, CVSS 8.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.

Affected products

• Zoom Communications Zoom Clients

Published 2026-08-11. Last modified 2026-08-28.