CVE-2026-53420: Zoom Communications Zoom Workplace

High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.

Affected products

• Zoom Communications Zoom Workplace: before 7.2.0 (fixed in 7.2.0)

Published 2026-10-13. Last modified 2026-10-14.