Vulnerability in Zoom Communications Zoom Clients

[ Description ]Official description

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund13 Oct 2026WID-SEC-2026-3937

  Zoom Video Communications Workplace and Rooms: Multiple vulnerabilities Translated from German

  CVE-2026-53420CVE-2026-108185CVE-2026-53418+1 more CVEs

[ References ]References

• www.zoom.com/en/trust/security-bulletin/zsb-26022