CVEFinder.io

CVE-2026-53407

⚠ī¸ high
Summary

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS Score
8.1
High
EPSS Score
0.2
Exploit Probability
Published Date
2026-06-12
First Seen: 2026-06-13
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 76.7% of all 365,968 vulnerabilities in our database.

#85,398
Top 25% most severe
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: Jun 15, 2026
🔍 Exploitation Status
None
No known exploits
⚙ī¸ Automatable
NO
Requires human interaction
đŸ’Ĩ Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-06-26
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE IDs (Weakness Types)
CWE-939

đŸ“Ļ Affected Products 2

Vendor Product Status Affected Versions
zoom workplace Affected
< 7.0.3
zoom workplace Affected
< 7.0.4

🔗 References 1

https://www.zoom.com/en/trust/security-bulletin/zsb-...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-53408 ⚠ī¸ high 8.1 0.2 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.... 2026-06-12
CVE-2026-30904 ℹī¸ low 1.8 0.0 Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a... 2026-05-13
CVE-2025-64741 ⚠ī¸ high 8.1 0.1 Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to... 2025-11-13
CVE-2025-62484 ⚠ī¸ high 8.1 0.3 Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthent... 2025-11-13
CVE-2025-49460 đŸ”ļ medium 4.3 0.1 Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denia... 2025-09-09
CVE-2025-49461 đŸ”ļ medium 4.3 0.0 Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service ... 2025-09-09
These CVEs affect the same products