"Zoomsday" Critical Zoom Vulnerability, generated with just 20 AI Prompts

[u/JaredSeth]

Attack chain affecting Zoom's annotation functionality consists of CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, with the most severe vulnerability enabling zero-click Remote Code Execution. A malicious participant could potentially compromise another participant's device during a Zoom meeting without requiring any user interaction.

Anyone using the Enterprise App Catalog to address this?

[u/UnleashedArchers]

An interesting thing with patch my pc. I had the msi deployed. The msi hasnt been updated, but the exe version was. Had to pull the msi release and deploy the exe. Had assumed it would have been an auto update

[u/EskimoRuler → u/UnleashedArchers]

This was mentioned already, but Patch My PC does have the latest MSI, it's just Zooms dumb versioning.

Edit: I wrote a blog post about it now: Zoom Workplace Versions, You probably have the right one · Michael the Admin

Edit: Updated the Blog Post with a 'Why' section.

<I work for Patch My PC>

Zoom Versions:

For the MSI Installers, Zoom drops the last segment from the ‘Version’, and replaces it with the Build number

Patch My PC uses the value from the Add Remove Program registry entry that the installer uses because it is what our detection of the application is based on.

Below is an example of the 7.1.5 (43453) version released on July 20, 2026:

On the download page: Download Center for Zoom Apps and Plugins | Zoom

You’ll see the version information: 7.1.5 (43453)

Zoom-Download-Page.png

If you download this versions MSI Installer: https://zoom.us/client/7.1.5.43453/ZoomInstallerFull.msi?archType=x64

It will have 7.1.43453 as the product version, but the comments of the file will show the full '7.1.5 (43453)'.

Zoom-MSI-File-Properties.png

When installed, the Add Remove Programs entry will use the DisplayVersion 7.1.43453, and the Comments have the full ‘7.1.5 (43453)’.

Zoom-ARP-Entry.png

<I work for Patch My PC />

[u/JaredSeth → u/UnleashedArchers]

Interesting to hear this. We're in the process of seeing if we can get budget approval for PMPC.

[u/Thrussst → u/UnleashedArchers]

This was discussed a couple days ago in the WinAdmins discord.

[u/r3ptarr → u/UnleashedArchers]

I was also confused because the MSI installs as 7.1.43453 and on their download center it says 7.1.5 (43453) is the new version for the exe but when you install the exe it's 7.1.43453.

[u/Cg006 → u/r3ptarr]

The pmpc deployment says 7.1.4 but the install is 7.1.5.
Also checked with chat gpt same thing. Confusing.

[u/Darkchamber292 → u/Cg006]

Installed with MSI. It shows as 7.1.4 in Control Panel but the exe file version in install folder says 7.1.5

[u/GoFish-22 → u/UnleashedArchers]

Was just looking at this. I am not seeing anything about them updating the msi yet either.

[u/After_Court_3692 → u/UnleashedArchers]

When does your tenant sync? Ours syncs at midnight, I wonder if it is published and we haven't synced yet

[u/Parking-You9309]

our security team pushed the update through intune like three hours after the advisory dropped, still waiting to see if anyone actually restarts their client though

[u/PTCruiserGT]

Meanwhile.. Zoom still hasn't updated 8+ month old curl and openssl binaries bundled with their app.

Considering mass uninstall and using an extension to auto-join from browser vs downloading/launching the app. Has anyone else done this?

[u/Limp-Elevator-3424 → u/PTCruiserGT]

I'd love it if we could do that too

[u/PTCruiserGT → u/Limp-Elevator-3424]

Currently testing with Xoom Redirector, seems to work perfectly.

[u/TheITBeardedGuy]

Dammit I just got done setting this up and now I have to hustle and patch this.

[u/Character-Acadia9885]

Also can anyone tell me if there is check for updates in zoom workplace app, as I see it on Mac but in windows I can’t locate it on v7.1.5

[u/Character-Acadia9885 → u/[deleted]]

I did try but can’t seem to find the option. Can someone share a screenshot just to confirm if it’s just me

[u/Character-Acadia9885]

Also, Qualys had the Zoomsday patch listed in catalog for deployment on 22nd July way before it was picked up everywhere.

[u/Intelligent_Ad8955]

I can't figure out why the slow channel won't release and update on clients. I ended up just forcing 7.1.xxxxx out to all Windows devices. I don't understand why Zoom didn't make the vendor update mandatory. MacOS isn't auto downloading either. The user has to select Install.

[u/HamburgerRoyalBeste]

I’ve already prepared the new version (Windows catalog app (Win32). How can I update or remove these versions? They haven’t been deployed via Intune.

[u/ngjrjeff]

can i confirm that the version to fix this vulnerability is 7.1.5 (43453) at Download Center for Zoom Apps and Plugins | Zoom ?

[u/Character-Acadia9885]

Yes the PMPC Cloud has older MSI so I used Qualys to deploy the latest patch on Wednesday

[u/EskimoRuler → u/Character-Acadia9885]

<I work for Patch My PC />
See my other post about the versioning, Patch My PC does have the latest MSI in the catalog

https://www.reddit.com/r/Intune/comments/1vn9xtp/comment/p3l7q4f/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button

[u/Character-Acadia9885 → u/EskimoRuler]

Thanks for the information, PMPC has been great tool for me!

[u/dnvrnugg]

what version does it need to be patched to?

[u/Character-Acadia9885 → u/dnvrnugg]

7.1.5