---
id: CVE-2026-53418
title: >-
  Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for
  Android before version 7.2.1 may allow an unauthenticated user to conduct an
  escalation of privilege via network access.
summary: >-
  Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for
  Android before version 7.2.1 may allow an unauthenticated user to conduct an
  escalation of privilege via network access.
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'
cwe:
  - CWE-939
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T16:53:44.693'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-53418'
references:
  - url: 'https://www.zoom.com/en/trust/security-bulletin/zsb-26019'
    label: security@zoom.us
tags:
  - nvd
ingestedAt: '2026-10-13T15:33:40.077Z'
---

## Overview

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.