CVE Watch11 ago 2026

CVE-2026-53415

Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another partici

CVSS

8.3

Alto

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 11 ago 2026 · Última mod.: 11 ago 2026 · CWE-416

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access.

Referencias oficiales

www.zoom.comhttps://www.zoom.com/en/trust/security-bulletin/zsb-26017

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-703117.8 ALT

—

———Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.7h CVE-2026-703077.0 ALT

—

———Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.7h CVE-2026-688207.0 ALT

—

———Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.7h CVE-2026-668028.1 ALT

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.7h CVE-2026-657898.1 ALT

—

———Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.7h CVE-2026-657887.0 ALT

—

———Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.7h