LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Zoom

9 CVEs published in the last four months and 3 stories. Exploited flaws first.

Critical1
High8
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-534129.8criticalworkplace desktopImproper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK fo97d ago
CVE-2026-534088.1highmeeting software development kitImproper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and bef131d ago
CVE-2026-534078.1highworkplaceImproper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and bef131d ago
CVE-2026-309067.8highroomsUntrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated 161d ago
CVE-2026-309057.8highworkplace virtual desktop infrastructureExternal Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 161d ago
CVE-2026-534097.8highroomsImproper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to co97d ago
CVE-2026-534117.8highworkplace virtual desktop infrastructureA time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Z97d ago
CVE-2026-534067.8highremote controlInsufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before versio131d ago
CVE-2026-534107highremote control for zoom contact centerA time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Z97d ago

Filter the full tracker by Zoom →

Our coverage of Zoom

phishing

Fake Zoom installer hides macOS backdoor CloudSyncD

Jamf Threat Labs has uncovered a new macOS backdoor, dubbed CloudSyncD, which is distributed through a fake Zoom installer. The malware was first observed in development on September 15, 2026, and quickly transitioned to live command-and-control infrastructure within two days.

vulnerability

Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated that federal agencies patch two actively exploited vulnerabilities in TrueConf Server, a video conferencing platform developed in Russia. The flaws, identified as CVE-2026-72529 and CVE-2026-72530, were added to CISA's Known Exploited Vulnerabilities catalog on Thursday, indicating their use in real-world attacks.…

vulnerabilitycritical

“Zoomsday” flaws could let one Zoom participant attack another

Three vulnerabilities, collectively dubbed "Zoomsday" by researchers, have been identified in the Zoom meeting platform. These flaws, tracked as CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, could enable one participant in a Zoom meeting to compromise another through specially crafted collaboration data.