CVE-2026-108185

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access...

CVE-2026-108184

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access...

CVE-2026-108185

Certain Zoom Clients are vulnerable to an improper certificate validation flaw within the My Notes feature. This vulnerability could allow an unauthenticated user to perform an information disclosure via network access. The impact includes potential high levels of confidentiality and integrity lo...

CVE-2026-108185

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access...

CVE-2026-108184

Certain Zoom Clients for Windows are vulnerable to improper certificate validation , which may allow an unauthenticated user to perform information disclosure via network access. The vulnerability is associated with CWE-295 . No specific exploit information or remediation steps are provided in th...

CVE-2026-108184

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access...

PT-2026-111621

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access...

CVE-2026-108184: Improper Certificate Validation

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access...

CVE-2026-108185: Improper Certificate Validation

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access...

PT-2026-111622

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access...

Vulnerabilities exploited in Zoom

Zoom has identified vulnerabilities in the Zoom Clients and Zoom VDI Client software. The Zoom Clients contain several vulnerabilities related to the annotation function. One vulnerability involves an incomplete bounds check, which can lead to a buffer overwrite. This allows an external participa...

CVE-2026-53413

Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access...

CVE-2026-53415

Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access...

CVE-2026-53415

The CVE-2026-53415 entry identifies a Use-After-Free vulnerability in Zoom Clients’ annotator function, allowing a meeting participant to remotely execute code on another participant over the network. The issue is confirmed across multiple sources (NVD and CVE listings). Affected component: Zoom ...

CVE-2026-53415 Zoom Clients - Use After Free

Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access...

CVE-2026-53415 Zoom Clients - Use After Free

Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access...

EUVD-2026-56244

Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access...

CVE-2026-53414 Zoom Clients - Buffer Over-read

Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access...

CVE-2026-53414 Zoom Clients - Buffer Over-read

Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access...

CVE-2026-53414

The CVE-2026-53414 entry concerns Zoom Clients with a missing bounds check in the annotator function, leading to a buffer over-read. The vulnerability is exploitable by a meeting participant over the network and can cause a denial of service to another participant. Documents confirm the vulnerabl...