# CVE-2026-53415: Zoom Clients use-after-free in annotator function

Source: https://junglewise.ai/threats/cve-2026-53415-zoom-clients-use-after-free-in-annotator-function  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-53415 · Severity: high · CVSS 8.3 · Published 2026-08-11

Zoom's meeting clients (desktop and VDI applications) contain a memory safety vulnerability in their annotation feature that could allow an attacker to execute malicious code on a participant's computer. A malicious meeting participant could exploit this to take over another user's system, access sensitive data, or install persistent malware—all without additional user action beyond normal meeting participation.

Technologies: [Zoom Meeting SDK](https://junglewise.ai/threats/technologies/meeting-sdk), [Zoom Rooms](https://junglewise.ai/threats/technologies/rooms), [Zoom Video SDK](https://junglewise.ai/threats/technologies/zoom-video-sdk), [Zoom Workplace](https://junglewise.ai/threats/technologies/workplace), [Zoom Workplace VDI Client for Windows](https://junglewise.ai/threats/technologies/workplace-vdi-client-for-windows). Vendors: [Zoom](https://junglewise.ai/threats/vendors/zoom).

## Quick answers

**Is CVE-2026-53415 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-53415 being exploited in the wild.

**How severe is CVE-2026-53415?** High severity, with a CVSS score of 8.3, published 11 August 2026.

**Which products and versions are affected?** Zoom Meeting SDK before 7.1.5; Zoom Rooms before 7.1.5; Zoom Video SDK before 2.6.5; Zoom Workplace before 7.1.5 and 7.0.6; and 1 more.

**Is there a fix for CVE-2026-53415?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-53415 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-53415?** Check whether you run Zoom Meeting SDK, Zoom Rooms, Zoom Video SDK or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A use-after-free vulnerability exists in the annotator function of Zoom Clients, where freed memory is accessed after deallocation, leading to potential code execution. The vulnerability requires network access and user interaction (the target must be in an active meeting), but no special privileges are needed. An attacker participating in the same meeting can trigger the vulnerability to achieve remote code execution with the privileges of the Zoom process. Patches are available: Zoom Workplace updated to 7.1.5 or 7.0.6, VDI Client to 7.0.11 or 6.6.16, Zoom Rooms to 7.1.5, Meeting SDK to 7.1.5, and Video SDK to 2.6.5.

## Affected products

- Zoom Workplace before 7.1.5 and 7.0.6
- Zoom Workplace VDI Client for Windows before 7.0.11 and 6.6.16
- Zoom Rooms before 7.1.5
- Zoom Meeting SDK before 7.1.5
- Zoom Video SDK before 2.6.5

## Timeline

- 2026-08-11: disclosed: CVE-2026-53415 published by Zoom
- 2026-08-14: other: Zoom Video SDK added to affected products list (revision 1.1)

## References

- [https://www.zoom.com/en/trust/security-bulletin/zsb-26017](https://www.zoom.com/en/trust/security-bulletin/zsb-26017)

## Related threats

- [Zoom Workplace for Windows improper input validation account takeover](https://junglewise.ai/threats/cve-2026-53412-zoom-workplace-for-windows-improper-input-validation-account)
- [Zoom Workplace improper authorization in custom URL scheme handler](https://junglewise.ai/threats/cve-2026-53408-zoom-workplace-improper-authorization-in-custom-url-scheme)
- [Zoom Workplace improper authorization in custom URL scheme handler](https://junglewise.ai/threats/cve-2026-53407-zoom-workplace-improper-authorization-in-custom-url-scheme)
- [Zoom Rooms for Windows privilege escalation in installer](https://junglewise.ai/threats/cve-2026-30906-zoom-rooms-for-windows-privilege-escalation-in-installer)
- [Zoom Workplace for iOS protection mechanism failure](https://junglewise.ai/threats/cve-2026-30904-zoom-workplace-for-ios-protection-mechanism-failure)