Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client

A vulnerability in Zoom's annotation feature could have allowed a meeting participant to take control of another attendee's computer. This flaw could be exploited without the victim taking any action, such as clicking or downloading anything. The vulnerability was present in the annotation tool, which allows participants to draw and type on a shared screen. If exploited, it could have enabled an attacker to hijack the computers of both the presenter and other viewers. The flaw required no interaction from the victim beyond being present in the meeting.