Warning: Zero-Click Remote Code Execution in Zoom Clients, Patch Immediately!

Zoom clients (Workplace, VDI Client/Plugin, Rooms, Meeting SDK, Video SDK) contain a high-severity out-of-bounds write vulnerability (CVE-2026-53413, CVSS 8.3) in the annotator feature that can allow a meeting participant to trigger remote code execution via malformed annotation messages; the Centre for Cybersecurity Belgium and vendor advise immediate patching to fixed versions and enhanced monitoring for related suspicious activity.