{"slug": "zoom-screen-sharing-flaw-could-give-attackers-control-of-participants-devices", "title": "Zoom Screen-Sharing Flaw Could Give Attackers Control of Participants' Devices", "summary": "A Security researchers discovered a critical Zoom Workspace flaw allowing attackers to remotely execute code and control participants' devices via the screen-sharing annotation tool, affecting Windows, Mac, iOS, Android, and Linux versions prior to 7.1.5 and 7.0.6. The exploit was developed in 24 hours using 20 prompts on a public AI model, and Zoom deployed fixes after being notified on June 10.", "body_md": "Researchers at A Security have discovered a critical bug in Zoom that allows attackers to assume full control of a participant’s device by exploiting a flawed screen-sharing function.\n\nThe vulnerability exists in the [Zoom Workspace](/video-conferencing-software/149167/zoom-one) app for Windows, Mac, iOS, Android, and Linux. When a user launches the annotation tool while sharing their screen, the bug allows attackers to remotely execute malicious code and access participants’ devices. The attack requires no action from a victim’s end and leaves no visible warning, A Security says in its [blog post](https://a.security/blog/asecurity-zoomsday).\n\nThe firm discovered the bug and developed a working exploit for it in just 24 hours. They did it using just 20 prompts on a publicly available AI model, highlighting how AI can make cyberattacks easier to carry out.\n\n“This class of capability would previously have only been available to nation-state threat actors, but the model requiring elite teams, months of effort, and weapons-grade budgets has collapsed,” A Security says. “Today, a single researcher was able to develop a nation-state-level exploit in less than a day.”\n\nA Security notified Zoom about the bug on June 10. Zoom acknowledged it the next day and deployed client-side and server-side fixes to mitigate the threat a few weeks later.\n\nThe [video-conferencing service](/video-conferencing-software/9067/the-best-video-conferencing-software) also published security bulletins noting that the vulnerability exists across all Zoom Workplace platforms prior to versions 7.1.5 and 7.0.6. “Users can help keep themselves secure by [applying the latest updates](https://zoom.us/download),” Zoom [adds](https://www.zoom.com/en/trust/security-bulletin/zsb-26017/).\n\nThis comes after Apple issued [emergency macOS updates](/security/166609/update-your-mac-now-apple-issues-fix-for-critical-screen-sharing-flaw) to fix a similar screen-sharing flaw that allowed attackers to view a user’s screen, open files, and launch apps.", "url": "https://wpnews.pro/news/zoom-screen-sharing-flaw-could-give-attackers-control-of-participants-devices", "canonical_source": "https://uk.pcmag.com/security/166650/zoom-screen-sharing-flaw-could-give-attackers-control-of-participants-devices", "published_at": "2026-08-11 15:12:40+00:00", "updated_at": "2026-08-11 15:37:54.329706+00:00", "lang": "en", "topics": ["ai-safety", "ai-policy"], "entities": ["A Security", "Zoom", "Zoom Workplace", "Apple"], "alternates": {"html": "https://wpnews.pro/news/zoom-screen-sharing-flaw-could-give-attackers-control-of-participants-devices", "markdown": "https://wpnews.pro/news/zoom-screen-sharing-flaw-could-give-attackers-control-of-participants-devices.md", "text": "https://wpnews.pro/news/zoom-screen-sharing-flaw-could-give-attackers-control-of-participants-devices.txt", "jsonld": "https://wpnews.pro/news/zoom-screen-sharing-flaw-could-give-attackers-control-of-participants-devices.jsonld"}}