Patch Gap

Everyday apps · updated Oct 27, 2026

Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app

Patched: update nowHigh

Last checked · Check before installing; only use the official link.

Zoom published four security notices on October 13, 2026. Two bugs could let someone on your network (such as on public Wi-Fi) spy on data from Zoom because Zoom did not check certificates the right way. One bug in Zoom Phone could let an attacker get more power on your computer. One bug in the Android app could let another app steal data. Updating Zoom fixes them.

Status
Patched: update now
Being attacked?
Not known[1]
Severity
High
Updated

Zoom's bulletins do not say any of these bugs are being attacked. Severity: Zoom rates the bugs High (scores 7.4 to 8.1). First reported .

Am I affected?

You are at risk if your Zoom Workplace is older than version 7.2.0 (7.1.9 for some branches). Open Zoom, click your picture, and check Help > About Zoom Workplace.

AppDeviceAffectedFixed in
Zoom WorkplaceWindowsZoom Workplace before 7.2.0 (before 7.1.9 on the older branch)7.2.0 (7.1.9 on its branch)[1][2][3]
Zoom WorkplaceMacZoom Workplace before 7.2.0 (before 7.1.9 on the older branch)7.2.0 (7.1.9 on its branch)[1][3]
Zoom WorkplaceLinuxZoom Workplace before 7.2.0 (before 7.1.9 on the older branch)7.2.0 (7.1.9 on its branch)[1][3]

How to check your version

These checks only look. They do not change anything on your computer.

Zoom Workplace on Windows

Easy way: Open Zoom. Click your picture at the top right > Check for Updates. Or Help > About Zoom Workplace.

Or type this in PowerShellRead-only. It only reads the version and changes nothing.

Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*','HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*','HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Zoom*' | Select-Object DisplayName,DisplayVersion

Zoom Workplace on Mac

Easy way: Open Zoom. Menu bar: zoom.us > Check for Updates.

Or type this in TerminalRead-only. It only reads the version and changes nothing.

defaults read "/Applications/zoom.us.app/Contents/Info" CFBundleShortVersionString

Zoom Workplace on Linux

Easy way: Open the app and look in its Help or About menu, or check your software manager.

How to fix it

  1. Open Zoom.
  2. Click your picture at the top right > Check for Updates.
  3. Click Update if it shows one.
  4. Or install the newest version from Zoom's official download page.

More on each app: Is my Zoom up to date?

Official links

Check before installing, and only use these official links or the app's own update button.

For AI agents

This page as data: /incidents/zoom-october-2026-security-bulletins.json. All problems: /feed.json. Use read-only checks only, and ask before installing anything.

Tracking numbers (CVE): CVE-2026-53420, CVE-2026-108184, CVE-2026-108185, CVE-2026-53418

Sources

  1. MakerZoom bulletin ZSB-26020: Zoom Workplace clients, buffer overflow (Oct 13, 2026)
  2. MakerZoom bulletin ZSB-26021: Zoom clients for Windows, certificate checks (Oct 13, 2026)
  3. MakerZoom bulletin ZSB-26022: Zoom clients, certificate checks in My Notes (Oct 13, 2026)
  4. MakerZoom bulletin ZSB-26019: Zoom Workplace for Android (Oct 13, 2026)
  5. NVDNVD: CVE-2026-53420 (Oct 13, 2026)

"Maker", "CISA", "NVD", "GitHub advisory" and "Official notice" are official sources. "Researcher" and "News" are extra context.