{ "schema_version": "1.0", "agent_rules": [ "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.", "Never install, update, uninstall or change settings without the user's clear OK for that exact step.", "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.", "If you cannot tell whether the user is affected, say so plainly instead of guessing.", "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'." ], "incident": { "id": "zoom-october-2026-security-bulletins", "url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins/", "path": "/incidents/zoom-october-2026-security-bulletins/", "json_url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins.json", "title": "Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app", "category": "apps", "platforms": [ "windows", "macos", "linux" ], "products": [ "zoom" ], "status": "patched", "status_label": "Patched: update now", "severity": "high", "severity_source": "Zoom rates the bugs High (scores 7.4 to 8.1).", "exploited_in_wild": "unknown", "exploited_note": "Zoom's bulletins do not say any of these bugs are being attacked.", "exploited_source_url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26020", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-10-13", "updated_at": "2026-10-27", "cves": [ "CVE-2026-53420", "CVE-2026-108184", "CVE-2026-108185", "CVE-2026-53418" ], "summary": "Zoom published four security notices on October 13, 2026. Two bugs could let someone on your network (such as on public Wi-Fi) spy on data from Zoom because Zoom did not check certificates the right way. One bug in Zoom Phone could let an attacker get more power on your computer. One bug in the Android app could let another app steal data. Updating Zoom fixes them.", "am_i_affected": "You are at risk if your Zoom Workplace is older than version 7.2.0 (7.1.9 for some branches). Open Zoom, click your picture, and check Help > About Zoom Workplace.", "action": "Update Zoom Workplace to 7.2.0 (7.1.9 on its branch)", "affected": [ { "product": "zoom", "product_name": "Zoom Workplace", "platform": "windows", "affected_versions": "Zoom Workplace before 7.2.0 (before 7.1.9 on the older branch)", "fixed_version": "7.2.0 (7.1.9 on its branch)", "fixed_min": null, "fix_note": null, "fixed_source_urls": [ "https://www.zoom.com/en/trust/security-bulletin/zsb-26020", "https://www.zoom.com/en/trust/security-bulletin/zsb-26021", "https://www.zoom.com/en/trust/security-bulletin/zsb-26022" ], "check": { "menu_path": "Open Zoom. Click your picture at the top right > Check for Updates. Or Help > About Zoom Workplace.", "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Zoom*' | Select-Object DisplayName,DisplayVersion", "shell": "PowerShell", "read_only": true }, "official_download": "https://zoom.us/download" }, { "product": "zoom", "product_name": "Zoom Workplace", "platform": "macos", "affected_versions": "Zoom Workplace before 7.2.0 (before 7.1.9 on the older branch)", "fixed_version": "7.2.0 (7.1.9 on its branch)", "fixed_min": null, "fix_note": null, "fixed_source_urls": [ "https://www.zoom.com/en/trust/security-bulletin/zsb-26020", "https://www.zoom.com/en/trust/security-bulletin/zsb-26022" ], "check": { "menu_path": "Open Zoom. Menu bar: zoom.us > Check for Updates.", "command": "defaults read \"/Applications/zoom.us.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://zoom.us/download" }, { "product": "zoom", "product_name": "Zoom Workplace", "platform": "linux", "affected_versions": "Zoom Workplace before 7.2.0 (before 7.1.9 on the older branch)", "fixed_version": "7.2.0 (7.1.9 on its branch)", "fixed_min": null, "fix_note": null, "fixed_source_urls": [ "https://www.zoom.com/en/trust/security-bulletin/zsb-26020", "https://www.zoom.com/en/trust/security-bulletin/zsb-26022" ], "check": { "menu_path": "Open the app and look in its Help or About menu, or check your software manager.", "command": null, "shell": null, "read_only": null }, "official_download": "https://zoom.us/download" } ], "fix_steps": [ "Open Zoom.", "Click your picture at the top right > Check for Updates.", "Click Update if it shows one.", "Or install the newest version from Zoom's official download page." ], "official_patch_links": [ { "label": "Zoom: official download", "url": "https://zoom.us/download" } ], "extra_checks": [], "sources": [ { "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26020", "title": "Zoom bulletin ZSB-26020: Zoom Workplace clients, buffer overflow", "date": "2026-10-13", "kind": "vendor", "official": true }, { "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26021", "title": "Zoom bulletin ZSB-26021: Zoom clients for Windows, certificate checks", "date": "2026-10-13", "kind": "vendor", "official": true }, { "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26022", "title": "Zoom bulletin ZSB-26022: Zoom clients, certificate checks in My Notes", "date": "2026-10-13", "kind": "vendor", "official": true }, { "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26019", "title": "Zoom bulletin ZSB-26019: Zoom Workplace for Android", "date": "2026-10-13", "kind": "vendor", "official": true }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53420", "title": "NVD: CVE-2026-53420", "date": "2026-10-13", "kind": "nvd", "official": true } ] } }