Zoom Zero-Click ‘Zoomsday’ Flaw Lets Meeting Participants Execute Code on Other Users’ Devices

Gbhackers •Divya • August 12, 2026

Zoom has released security updates to address four vulnerabilities that could expose meeting participants to significant attacks, including a zero-click remote code execution flaw dubbed “Zoomsday.” The most severe issue, tracked as CVE-2026-53413, affects Zoom’s annotation feature, which allows participants to draw, highlight, and add text during screen sharing sessions. Researchers at A Security indicated […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Zoom Vulnerabilities Enable Remote Code Execution via AI-Driven Exploits A critical zero-click vulnerability in Zoom's annotation feature, dubbed 'Zoomsday,' allows attackers to remotely execute code on participants' devices during meetings without user interaction. Discovered by A Security using AI tools, the flaws affect all major platforms including Windows, macOS, Linux, iOS, and Android. The vulnerabilities, tracked as CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, were identified and exploited within 24 hours using fewer than 20 prompts on publicly available AI models. Zoom has since issued patches for these vulnerabilities, emphasizing the need for users to update their applications immediately. The exploit's potential impact is significant, affecting 70% of Fortune 100 companies and posing risks to sensitive communications. No active exploitation has been reported in the wild as of now. 46 sources 72

Extracted Entities

Zoom Zero-Click ‘Zoomsday’ Flaw Lets Meeting Participants Execute Code on Other Users’ Devices

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

CVEs (1)

Platforms (1)