Blog

Update Zoom now. Three flaws let another participant attack your computer

10 September 2026

In August 2026, security researchers at a.security disclosed three flaws in Zoom, nicknamed “Zoomsday” and tracked as CVE-2026-53413, CVE-2026-53414 and CVE-2026-53415. Together they could let one participant in a meeting crash another participant’s Zoom, leak information from it, or run code on their computer, all through the annotation feature used to draw on shared screens. Zoom has patched all three.

Am I affected?

If you use Zoom Workplace on a Mac or Windows PC and your version is older than 7.1.5 (or 7.0.6 on the older release branch), yes. Zoom Rooms and the Zoom Meeting SDK before 7.1.5 are affected too.

What to do, two minutes

  1. Mac: open Zoom, click the zoom.us menu at the top left, then Check for Updates. Install what it offers.
  2. Windows: open Zoom, click your profile picture at the top right, then Check for Updates.
  3. Confirm the version shows 7.1.5 or higher afterwards.

Three habits that help regardless

  • Put a passcode or a waiting room on meetings you host.
  • If you don’t use annotation, whiteboards, remote control or file transfer, turn them off in Settings.
  • Let Zoom update itself. Most attacks use holes that were fixed months earlier.

Source: Malwarebytes, 12 August 2026.

If your machine has been acting strangely since a meeting, or Zoom won’t update because the operating system is too old, bring it in. Updating an old Mac or Windows install is a small job and it closes a lot of doors like this one.