Reported by 4 outlets

Timeline

1. original reporting

   Zoom Zero-Click ‘Zoomsday’ Flaw Lets Meeting Participants Execute Code on Other Users’ Devices

   gbhackers.com · 63d ago · August 12th, 2026

   Zoom has released security updates to address four vulnerabilities that could expose meeting participants to significant attacks, including a zero-click remote code execution flaw dubbed “Zoomsday.” The most severe issue, tracked as CVE-2026-53413, affects Zoom’s annotation feature, which allows participants to draw, highlight, and add text during screen sharing sessions. Researchers at A Security indicated […] The post Zoom Zero-Click ‘Zoomsday’ Flaw Lets Meeting Participants Execute Code on Other Users’ Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

2. mentioned by securityweek.com

   Zoom Patches Zero-Click Code Execution Vulnerability

   securityweek.com · 63d ago · August 11th, 2026

3. update from cyberpress.org

   Zoom Zero-Click Flaw Lets Meeting Participants Take Over Devices Without User Interaction

   cyberpress.org · 62d ago · August 12th, 2026

   Zoom has patched four security vulnerabilities that could allow a malicious meeting participant to remotely execute code, crash another attendee’s client, or access sensitive files. It affects Zoom’s annotation engine and can be exploited without requiring the victim to click a link, accept a prompt, download a file, or take any visible action beyond joining a meeting. Zoom Zero-Click Flaw Zoom rated CVE-2026-53413 as high severity, assigning it a CVSS score of 8.3. The company said the vulnerability is caused by a missing bounds check in the annotation function of Zoom Clients. A remote participant could exploit the issue through network access to execute code on another participant’s system. The weakness is particularly concerning because annotation data is automatically processed by the receiving Zoom client during a screen-sharing session. The vulnerable feature allows participants to draw, highlight, and insert text over a shared screen. Behind the interface, Zoom uses a proprietary protocol to exchange annotation objects between the meeting participant sharing content and those viewing it. CSN stated that this architecture creates a direct communication channel between viewers and presenters, enabling an attacker to send crafted annotation data to a selected participant. A security analysis identified the affected routine as CAnnoFormatBlock::Des

4. update from malware.news

   “Zoomsday” flaws could let one Zoom participant attack another

   malware.news · 62d ago · August 12th, 2026

   Researchers have found three vulnerabilities in the popular Zoom meeting platform that could let one meeting participant attack another through malicious collaboration data. The researchers named the set of flaws “Zoomsday.” Affected applications are: Zoom Workplace on all supported platforms before version 7.1.5 and 7.0.6, depending on the release branch Zoom Workplace VDI Client for Windows before versions 7.0.11 and 6.6.16, depending on the release branch Zoom Rooms on all supported platforms before version 7.1.5 Zoom Meeting SDK on all supported platforms before version 7.1.5 What can happen What this means is that someone in the same Zoom meeting could send data that the Zoom app was not prepared to handle. Instead of simply displaying a drawing, text box, or other annotation, a vulnerable client could be tricked into crashing, leaking information, or even running attacker-controlled code. Annotation features sound simple, but the underlying process is not. Your Zoom client receives structured data from another participant and turns tha