A critical security vulnerability in Zoom, tracked as CVE-2026-53413, enables attackers to execute arbitrary code on a user's device during video calls without any warning or interaction from the victim. The flaw affects Windows, macOS, Linux, iOS, and Android installations, making it a widespread threat across platforms.
The vulnerability allows remote code execution, meaning an attacker could potentially gain full control of a participant's device simply by initiating or joining a meeting. This poses serious risks for both personal users and organizations relying on Zoom for sensitive communications.
The good news: Zoom has already released a patch. Update to the latest version of the Zoom application immediately to close this security gap. If you use Zoom on multiple devices or operating systems, ensure all installations are updated, as the vulnerability spans desktop and mobile platforms equally.