Zoom patches zero-click flaw that could run code via annotations

Intelligence Summary

Zoom has released patches for a zero-click vulnerability affecting meeting annotation features. A malicious meeting participant could exploit the issue to execute code on another participant’s machine. The risk impacts users who rely on Zoom for calls and collaboration with others. Because exploitation does not require user interaction beyond joining the meeting, patching is time-sensitive. Organizations should update Zoom clients and monitor for any related anomalous behavior.

Recommended Action

Prioritize immediate review, validate exposure, and patch or mitigate affected systems.

Topics