Plan
active
Zoom Annotation Zero-Click Flaw Allows Meeting Client Hijack
- Engineer — Plan: Zero-click client-side RCE via Zoom’s annotation feature is a real exposure for any enterprise using Zoom for screen sharing. No KEV listing or public PoC present, so no immediate exploitation pressure — but update Zoom desktop clients to the patched version this sprint.
- SOC/IR — Learn: Noteworthy attack class (zero-click compromise through meeting software without user interaction) but no IOCs, no reported exploitation, and no viable detection surface is described; nothing actionable for rule writing or hunting today.
- Leader — Learn: The attack surface is broad — any employee on a Zoom call — but with no active exploitation or breach reported, this sits below the threshold for leadership action; file it as context for your next risk-register review of collaboration tool controls.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.