PatchSiren cyber security CVE debrief

CVE-2026-53407 Zoom Communications CVE debrief

CVE-2026-53407 is a HIGH-severity vulnerability (CVSS Score: 8.1) affecting Zoom Workplace. The vulnerability is caused by improper authorization in the handler for custom URL schemes in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS. This vulnerability may allow an unauthenticated user to conduct an escalation of privilege via network access.

Vendor: Zoom Communications
Product: Zoom Workplace
CVSS: HIGH 8.1
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-12
Original CVE updated: 2026-06-12
Advisory published: 2026-06-12
Advisory updated: 2026-06-12

Who should care

Users of Zoom Workplace on Android and iOS should update to the latest versions (7.0.4 for Android and 7.0.3 for iOS or later) to mitigate this vulnerability.

Technical summary

The vulnerability is caused by improper authorization in the handler for custom URL schemes in Zoom Workplace. This allows an unauthenticated user to potentially escalate privileges via network access.

Defensive priority

HIGH

Recommended defensive actions

Update Zoom Workplace to version 7.0.4 for Android and 7.0.3 for iOS or later.
Ensure that Zoom Workplace is properly configured and up-to-date.

Evidence notes

Vendor: Zoom (inferred from reference).

Official resources

CVE-2026-53407 was published on 2026-06-12T19:16:29.973Z and last modified on 2026-06-12T19:16:29.973Z.