Zoom zero-click flaw allowed RCE attacks during meetings

Multiple vulnerabilities in Zoom’s annotation engine could allow a malicious meeting participant to compromise another attendee’s device by sending specially crafted meeting data. The most serious issue, tracked as CVE-2026-53413, is a buffer overwrite that Zoom says could lead to remote code execution. A second flaw, CVE-2026-53414, involves a buffer over-read and can be abused …

The post Zoom zero-click flaw allowed RCE attacks during meetings appeared first on CyberInsider.