Zoom patches a critical remote code execution vulnerability

Zoom patched the critical zero-click vulnerability CVE-2026-53413 in its annotation feature, which could allow a meeting participant to execute code on another user’s computer without user interaction. According to the source, the issue affected Zoom clients on supported platforms, and Zoom began rolling out security updates.