← Back

CVE-2026-53407

nvd nist
Published: Jun 12, 2026Modified: Jun 26, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

Affected (2)

Products: Zoom: Workplace
Zoom
1 product
Workplace
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Zoom
Workplace
Before 7.0.4
Workplace
Before 7.0.3

Related CWEs

CWE-939
Improper Authorization in Handler for Custom URL Scheme
The product uses a handler for a custom URL scheme, but it does not properly restrict which actors can invoke the handler using the scheme.

References (1)

Source: security@zoom.us
Vendor Advisory

Timeline

No history available yet.