Zoom Communications Zoom Workplace vulnerabilities

2 CVEs affecting Zoom Communications Zoom Workplace, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-53420, published 2026-10-13.

More from Zoom Communications.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-53420, published 2026-10-13. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.
• CVE-2026-53418, published 2026-10-13. High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.