Zoom zero-click RCE flaws allow attackers to compromise meeting participants

Zoom has fixed four vulnerabilities, including two zero-click RCE (remote code execution, where attackers can run malicious commands on a system without user interaction) flaws in its text annotation feature that allow attackers in a meeting to compromise all other participants' systems silently. A researcher discovered these memory corruption bugs (where malicious input corrupts how data is stored in memory) using an AI agent in under 24 hours, demonstrating how AI tools are making sophisticated exploits accessible beyond elite attackers.