CVE-2026-53420: Buffer Overflow
Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The supplied vector indicates network access, high attack complexity, low privileges, and required user interaction. The description calls the attacker unauthenticated, which conflicts with the PR:L vector value, so authentication assumptions should be validated against the vendor bulletin.
Which systems should be prioritized for review?
Prioritize Zoom Workplace Client deployments that use the Zoom Phone feature. The issue is rated high severity and the vector indicates high confidentiality, integrity, and availability impact with a changed scope.
Is there a documented workaround for environments that cannot patch immediately?
No workaround, configuration mitigation, or affected version information is included in the provided data.