Is CVE-2026-53420 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-53420 being exploited in the wild.

How severe is CVE-2026-53420?

High severity, with a CVSS score of 8, published 13 October 2026.

Which products and versions are affected?

Zoom Workplace Clients all supported platforms before version 7.2.0.

Is there a fix for CVE-2026-53420?

Yes: fixed in 7.2.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-53420 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-53420?

Check whether you run Zoom Workplace Clients at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-53420: Zoom Workplace Clients buffer overflow in Phone feature

CVE-2026-53420 · Severity: high · CVSS 8 · Published 2026-10-13

Zoom Workplace Clients contain a buffer overflow vulnerability in the Phone feature that could allow an attacker to gain elevated privileges on an affected system. An attacker with network access and authenticated user interaction could exploit this to compromise the confidentiality, integrity, and availability of the system. Users should update to version 7.2.0 or later to protect themselves from this high-severity vulnerability.

Vendors: Zoom.

Quick answers

Is CVE-2026-53420 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-53420 being exploited in the wild.
How severe is CVE-2026-53420?: High severity, with a CVSS score of 8, published 13 October 2026.
Which products and versions are affected?: Zoom Workplace Clients all supported platforms before version 7.2.0.
Is there a fix for CVE-2026-53420?: Yes: fixed in 7.2.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-53420 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-53420?: Check whether you run Zoom Workplace Clients at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 7.2.0

Technical details

A buffer overflow exists in the Zoom Phone feature of Zoom Workplace Clients. The vulnerability requires network access (AV:N), limited privilege escalation is needed (PR:L), and user interaction is required (UI:R). Exploitation allows an unauthenticated user to achieve privilege escalation with high impact on confidentiality, integrity, and availability. The vulnerability is fixed in version 7.2.0 and later.

Affected products

Zoom Workplace Clients all supported platforms before version 7.2.0

Timeline

2026-10-13: disclosed

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26020

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.