Critical Zoom Vulnerabilities Enable Remote Code Execution via AI-Driven Exploits

• •The 'Zoomsday' vulnerabilities allow remote code execution on devices without user interaction.
• •A Security identified the flaws using AI tools, achieving exploit development in under 24 hours.
• •Zoom has released patches for the vulnerabilities; users are urged to update immediately.

A critical zero-click vulnerability in Zoom's annotation feature, dubbed 'Zoomsday,' allows attackers to remotely execute code on participants' devices during meetings without user interaction. Discovered by A Security using AI tools, the flaws affect all major platforms including Windows, macOS, Linux, iOS, and Android. The vulnerabilities, tracked as CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, were identified and exploited within 24 hours using fewer than 20 prompts on publicly available AI models. Zoom has since issued patches for these vulnerabilities, emphasizing the need for users to update their applications immediately. The exploit's potential impact is significant, affecting 70% of Fortune 100 companies and posing risks to sensitive communications. No active exploitation has been reported in the wild as of now.