Zoom Bug Allowed Device Takeover During Screen Sharing Calls

Washington DC, United States Aug 11, 2026 ALN: As AI models gain advanced capabilities to find vulnerabilities in software, develop ways to exploit them, and even carry out autonomous hacking sprees, researchers offered a sobering new example on Tuesday, disclosing vulnerabilities in the video conferencing platform Zoom that could have been exploited to take over targets’ devices. Anyone on a call that involved screen sharing, whether participants or the host, would have been vulnerable to a silent attack that could be carried out with no indication and no interaction from the victim.

Researchers from the digital defense firm A Security say the bug was discovered in early June using publicly available AI models, and that it took fewer than 20 prompts to uncover the vulnerabilities and create a working attack. Zoom issued a security advisory on Tuesday, including details about fixes the company has already begun rolling out to address the flaws, which affected devices running all operating systems that Zoom supports—Windows, macOS, Linux, iOS, and Android.

“What is interesting for us and what we believe is dangerous is the democratization of these capabilities—the barrier to entry is dropping rapidly,” A Security cofounder Omer Gull told ahead of the disclosure. “Before it would have taken a team of five people maybe six months with a lot of refining and iteration to find this. Now people can reach the same results with under 20 prompts. And Zoom is an important type of target because people assume trust when using it. They don’t see it as a threat.”

The vulnerabilities were specifically in the protocol used to facilitate real-time annotation during screen sharing. The researchers say that their AI bug hunting systems specifically delved into this component because, like human bug hunters, they have been trained that convoluted and obscure functions often contain overlooked vulnerabilities. This is particularly true with proprietary, closed-source software. An established company like Zoom presumably does extensive code review and vetting on all components and functions, but without the benefit of public, open review, esoteric yet complex features like annotation are more likely to contain mistakes.

Zoom did not respond to multiple requests for comment from about the A Security findings.

The bugs are now patched, with Zoom issuing both server and client-side fixes—or patches for both Zoom’s own servers and the applications that run on customer devices. But the researchers emphasize that it was alarming to contemplate bugs that could have been exploited to take over a target device simply by getting someone onto a Zoom call. Joining a call is in itself a gesture of trust, but given how ubiquitous video calling is in both personal and professional contexts—and given that Zoom in particular is also widely used for events and semipublic activities like webinars—people typically have their guard down when joining a Zoom.

“If you just get on a Zoom with us, we can take over your device,” A Security cofounder Yossi Torati told on a call. (It was, incidentally, hosted on Microsoft Teams.) “The worst-case scenario is that we can take over an enterprise just by having this vulnerability in our hands. If I’m an attacker, I can be on a call with someone from a company, take control of their computer and their credentials, and then use them to move laterally in the enterprise.”

Practitioners often call security a “cat-and-mouse game,” but as AI bug hunting proliferates, this delicate dance has become an all-out race. The implications of these findings extend beyond just the immediate threat to Zoom users. They raise significant concerns regarding the security of video conferencing platforms as a whole, especially as they become increasingly integral to business operations, education, and social interactions. The reliance on such platforms has surged dramatically since the onset of the COVID-19 pandemic, leading to a proliferation of remote work and online learning environments.

The vulnerabilities highlighted by A Security are particularly alarming because they underscore a broader trend in cybersecurity: the increasing ease with which malicious actors can exploit software vulnerabilities. With the advent of AI-driven tools that can automate the discovery of such weaknesses, the threshold for executing sophisticated attacks is rapidly diminishing. This democratization of hacking capabilities poses a significant challenge for cybersecurity professionals, who must now contend with a new breed of adversaries equipped with powerful tools that were once the domain of highly skilled experts.

Moreover, the incident raises questions about the security practices of major software companies like Zoom. While it is understood that no software is entirely immune to vulnerabilities, the effectiveness of a company’s response to such threats is critical. Zoom's prompt issuance of patches is a positive sign; however, it also highlights the necessity for ongoing vigilance and proactive security measures. Companies must not only react to vulnerabilities but also anticipate potential future threats by adopting a more robust security posture that includes regular audits, code reviews, and user education.

The nature of remote communication tools means that users often operate under the assumption that their conversations are secure. This trust can lead to complacency, making individuals and organizations more susceptible to attacks. As such, it is essential for users to remain aware of the potential risks associated with using video conferencing software. Implementing best practices, such as using unique meeting IDs, enabling waiting rooms, and being cautious about sharing sensitive information during calls, can help mitigate some of these risks.

In the wake of this disclosure, organizations that utilize Zoom for their operations may want to reassess their security protocols. This could involve conducting security training for employees to ensure they understand the risks associated with video conferencing and are equipped to recognize potential threats. Additionally, organizations might consider implementing more stringent access controls and monitoring tools to detect unusual activity during video calls.

As the cybersecurity landscape continues to evolve, the need for collaboration between software developers, security researchers, and users becomes increasingly important. Developers must prioritize security in their software design and development processes, while researchers play a crucial role in identifying vulnerabilities. Users, too, must take an active role in safeguarding their digital environments by staying informed and adopting security best practices.

In conclusion, the vulnerabilities discovered in Zoom serve as a stark reminder of the complexities and challenges inherent in modern cybersecurity. As technology advances and the tools for both attacking and defending become more sophisticated, the need for heightened awareness and proactive measures is more critical than ever. The implications of these findings extend far beyond the immediate threat to Zoom users, highlighting the broader challenges facing the cybersecurity landscape in an increasingly connected world.