Popular video conferencing service Zoom has resolved 4 security vulnerabilities (CVE-2026-53413, CVE-2026-53414, CVE-2026-53415 CVE-2026-53416) in Zoom products. A malicious actor could exploit some of these vulnerabilities to trigger sensitive information disclosure, remote code execution and denial of service condition on the targeted system. Issues affect:

• Zoom Workplace for all platforms before versions 7.1.5 and 7.0.6 in their respective branches;
• Zoom Workplace VDI Client for Windows before versions 7.0.11 and 6.6.16 in their respective branches;
• Zoom Rooms for all platforms before version 7.1.0;
• Zoom Meeting SDK for all platforms before version 7.1.0;
• Zoom Rooms for all platforms before version 7.1.5;
• Zoom Meeting SDK for all platforms before version 7.1.5;
• Zoom Workplace VDI Client for Windows before versions 7.0.11 and 6.6.15 in their respective branches;
• Zoom Workplace VDI Plugins for all platforms before versions 7.0.11 and 6.6.15 in their respective branches.

More information on vulnerabilities and updates is available in Zoom security bulletins – zoom.us.