CVE-2026-53420 PUBLISHED

Assigner: Zoom
Reserved: 09.06.2026 Published: 13.10.2026 Updated: 13.10.2026

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS Score: 8

Attack Vector	Network	Scope	Changed
Attack Complexity	High	Confidentiality Impact	High
Privileges Required	Low	Integrity Impact	High
User Interaction	Required	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Zoom Communications
Product	Zoom Workplace
Versions	Default: unaffected affected from 0 to 7.2.0 (excl.)

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26020

Problem Types

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE