VulnSocial

CVE-2026-53408General(zoom / meeting_software_development_kit)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch zoom meeting_software_development_kit systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

zoom CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-939

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • meeting_software_development_kit
  • workplace

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-06-09); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
zoom
Products
meeting_software_development_kitworkplace

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-06-09: 1Mentions · 2026-06-10: 1Mentions · 2026-06-13: 1Mentions · 2026-06-22: 1Patch / Workaround · 2026-06-10: 1Technical Details · 2026-06-10: 106-0906-1006-1306-22
Signal classification3 categories
General
250.0%
Disclosure
125.0%
Patch
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-091
Disclosure1
2026-06-101
Patch1
2026-06-131
General1
2026-06-221
General1
Full discourse4 posts
  • Dimitri Os@Ch0pin
    Disclosure

    In the era of AI-generated code and automated research, I still believe human creativity has the edge. My latest High severity CVEs in Zoom’s Android and iOS clients (CVE-2026-53407, CVE-2026-53408) came from pure human reasoning—not automation 😎 https://www.zoom.com/en/trust/security-bulletin/zsb-26010/

    Post summary

    The author announces two newly disclosed high severity CVEs in Zoom’s Android and iOS clients, linking to Zoom’s official security bulletin without mentioning PoCs, exploits, or patches.

    04046142.5K
    5.0K followersView on X
  • ゆぅさん@YY20424277
    General

    【3軸解説】「Zoom Video Communications, Inc.のZoom Meeting SDK等の複数製品におけるカスタム URL スキームのハンドラの不適切な認可に関する脆弱性（CVE-2026-53408）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3… ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis

    Post summary

    The text is a high‑level overview of CVE‑2026‑53408, outlining background, purpose, and effect, but it does not provide any PoC, exploit details, active usage claims, patch information, or in‑depth technical analysis.

    0000094
    858 followersView on X
  • VulDB 🛡@vuldb
    General

    Attention, elevated activities detected targeting Zoom Workplace and Meeting SDK (CVE-2026-53408) https://vuldb.com/vuln/370718/cti

    Post summary

    The post alerts to detected elevated activity targeting Zoom Workplace and Meeting SDK (CVE‑2026‑53408) but provides no proof of exploitation, technical details, or patch information.

    0000083
    2.2K followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: High severity Privilege Escalation vulnerabilities in #Zoom products (Windows & Mobile clients). CVE-2026-53407, CVE-2026-53408 & CVE-2026-53406. https://www.zoom.com/en/trust/security-bulletin/zsb-26009/, https://www.zoom.com/en/trust/security-bulletin/zsb-26010/ #patch #patch #patch #EoP

    Post summary

    Zoom alerts users to high‑severity privilege escalation CVEs (CVE‑2026‑53406/07/08) in its Windows and mobile products and provides links to security bulletins that detail the available patches.

    00000201
    7.2K followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
Appzoommeeting_software_development_kit-android-
Appzoommeeting_software_development_kit-iphone_os-
Appzoomworkplace-android-
Appzoomworkplace-iphone_os-

Explore more

Back to dashboardzoom CVEsmeeting_software_development_kit vulnerabilities