CVE-2026-53407

HIGH CVSS 8.1 View on NVD ↗

Description

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26010

Published: Jun 12, 2026 19:16 UTC Modified: Jun 12, 2026 19:16 UTC