CVE catalog

CVE-2026-53408

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privil

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.21% · Oct 25, 2026

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Cpemeeting_software_development_kitNot reported7.0.3fixed
Cpemeeting_software_development_kitNot reported7.0.4fixed
CpeworkplaceNot reported7.0.3fixed
CpeworkplaceNot reported7.0.4fixed
Cpemeeting_software_development_kitNot reported7.0.4fixed
CpeworkplaceNot reported7.0.4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpemeeting_software_development_kitcpeNot reported7.0.3Not reportedNot reportedNot reported
Cpemeeting_software_development_kitcpeNot reported7.0.4Not reportedNot reportedNot reported
CpeworkplacecpeNot reported7.0.3Not reportedNot reportedNot reported
CpeworkplacecpeNot reported7.0.4Not reportedNot reportedNot reported
Cpemeeting_software_development_kitcpeNot reported7.0.4Not reportedNVD-CVE-2026-53408Not reported
CpeworkplacecpeNot reported7.0.4Not reportedNVD-CVE-2026-53408Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]