The Bundesamt für Sicherheit in der Informationstechnik has identified multiple security vulnerabilities in Zoom Video Communications Workplace on Android platforms before version 7.0.4. These vulnerabilities enable privilege escalation, potentially allowing an attacker to gain elevated permissions within the affected application environment. The advisory references two CVEs (CVE-2026-53407 and CVE-2026-53408) related to these issues. No detailed technical exploitation methods or impact scenarios are provided, and no CVSS score is assigned.

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges within the Zoom Workplace Android application, potentially compromising the security context of the app. This could lead to unauthorized access to sensitive collaboration features or data within the app environment. There is no indication of known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory (Bundesamt für Sicherheit in der Informationstechnik, advisory ID WID-SEC-W-2026-1839) for current remediation guidance. Users should upgrade Zoom Workplace on Android to version 7.0.4 or later once available. Until official fixes are confirmed, limit use of affected versions and monitor vendor communications for updates.