CVE-2026-53418: High severity Zoom Zoom Workplace for Android vulnerability
Published Oct 13, 2026
·Updated
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.
Affected Software
1 affected component
Zoom Zoom Workplace for Android<7.2.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Zoom Workplace for Androidto a version that resolves this vulnerability.Fixed in 7.2.1
Event History
Oct 13, 2026
CVE Published
via MITRE·02:15 PM
Data Sourced
via MITRE·02:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require user interaction?
No. The CVSS vector indicates that no user interaction is required.
2
What security impact is indicated?
The CVSS vector indicates high impact to confidentiality and integrity. It indicates no impact to availability.
3
Which installations should be remediated?
Zoom Workplace for Android versions before 7.2.1 are affected.