CVE-2026-53408

HIGH

Zoom Communications Zoom Workplace < 7.0.4 - Improper Authorization in Handler for Custom URL Scheme

Title source: rule

Description

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

References (1)

Core 1

Core References

https://www.zoom.com/en/trust/security-bulletin/zsb-26010

Scores

CVSS v3 8.1

EPSS 0.0021

EPSS Percentile 11.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-939

Status published

Products (5)

zoom/meeting_software_development_kit < 7.0.3

zoom/meeting_software_development_kit < 7.0.4

zoom/workplace < 7.0.3

zoom/workplace < 7.0.4

Zoom Communications/Zoom Workplace < 7.0.4

Published Jun 12, 2026

Tracked Since Jun 13, 2026