Zoom Annotation Zero-Click Flaw Allows Meeting Client Hijack

Wed, 12 Aug 2026 11:57:00 +0000

Engineer — Plan: Zero-click client-side RCE via Zoom’s annotation feature is a real exposure for any enterprise using Zoom for screen sharing. No KEV listing or public PoC present, so no immediate exploitation pressure — but update Zoom desktop clients to the patched version this sprint.
SOC/IR — Learn: Noteworthy attack class (zero-click compromise through meeting software without user interaction) but no IOCs, no reported exploitation, and no viable detection surface is described; nothing actionable for rule writing or hunting today.
Leader — Learn: The attack surface is broad — any employee on a Zoom call — but with no active exploitation or breach reported, this sits below the threshold for leadership action; file it as context for your next risk-register review of collaboration tool controls.

Client-Side on CuraSec