[CVE-2026-53407] Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for A…

Descripción técnica

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

Puntuación CVSS

Score: 8.1/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Productos afectados

Workplace — Zoom

Debilidades (CWE)

CWE-939

Fuente oficial

Publicado en NIST NVD.