CVE-2026-53407CWE-939

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an…

High · published June 12, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00407 · 33.9th percentile
Weakness
CWE-939 · Improper Authorization in Handler for Custom URL Scheme
Published
2026-06-12T17:56Z
EPSS history
Timeline
  • 12 JUN 17:56Z
    Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an…
    cvelistv5