VulnSocial

CVE-2026-53407Disclosure(zoom / workplace)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch zoom workplace systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

zoom CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-939

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • workplace

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-06-09); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
zoom
Products
workplace

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-09: 1Mentions · 2026-06-10: 1Mentions · 2026-06-17: 1Patch / Workaround · 2026-06-10: 1Technical Details · 2026-06-17: 106-0906-1006-17
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-091
Disclosure1
2026-06-101
Patch1
2026-06-171
Disclosure1
Full discourse3 posts
  • Dimitri Os@Ch0pin
    Disclosure

    In the era of AI-generated code and automated research, I still believe human creativity has the edge. My latest High severity CVEs in Zoom’s Android and iOS clients (CVE-2026-53407, CVE-2026-53408) came from pure human reasoning—not automation 😎 https://www.zoom.com/en/trust/security-bulletin/zsb-26010/

    Post summary

    The user announced two high‑severity Zoom client CVEs (CVE‑2026‑53407 and CVE‑2026‑53408) and linked to a Zoom security bulletin, without providing PoC, exploit code, patch details, or technical specifics.

    04046142.5K
    5.0K followersView on X
  • Crypto Master💎 Arichain@Vijaykiran0987
    Disclosure

    Zoom Flaws CVE-2026-53407 Allow Privilege Escalation on Mobile https://thecybrdef.com/zoom-flaws-cve-2026-53407-allow-privilege-escalation-on-mobile/ #Cyberupdates #Cybertechnews #Cybersecurity

    Post summary

    The tweet highlights a newly disclosed Zoom vulnerability (CVE‑2026‑53407) that could enable privilege escalation on mobile devices, with a link provided for additional information.

    0000041
    64 followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: High severity Privilege Escalation vulnerabilities in #Zoom products (Windows & Mobile clients). CVE-2026-53407, CVE-2026-53408 & CVE-2026-53406. https://www.zoom.com/en/trust/security-bulletin/zsb-26009/, https://www.zoom.com/en/trust/security-bulletin/zsb-26010/ #patch #patch #patch #EoP

    Post summary

    Zoom warns of high‑severity privilege escalation vulnerabilities (CVE‑2026‑53406/07/08) affecting Windows and mobile clients, directing users to official patches via its security bulletins.

    00000201
    7.2K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appzoomworkplace-android-
Appzoomworkplace-iphone_os-

Explore more

Back to dashboardzoom CVEsworkplace vulnerabilities