The Patching Friars' AlmanacA calendar of CVE saints

Patron of August 11

ZoomsdayHoly card for zoomsday, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 Zoomsday DIES IRAE, DIES ZOOM
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Zoomsday, Prophet of the Final Meeting

Patron of video calls, doodles on the shared screen, and participants nobody invited.

Life

On 11 August 2026 A Security, with researcher Idan Levcovich, revealed the flaws in Zoom's annotation feature, the one that lets people draw and type on a shared screen. A meeting participant could run code on the others' devices without anyone clicking anything, on Windows, macOS, Linux, iOS and Android, even in end-to-end encrypted meetings. The researchers said they found them with the help of an AI agent.

Prayer

O Saint Zoomsday, who scribbles on the screen and in memory, let our annotations remain drawings. Amen.

How to celebrate

Celebrated by updating Zoom Workplace to 7.1.5 or 7.0.6 and turning the camera off, just in case.

Whoever annotates the meeting annotates your heap.

Technical record

Disclosed on
August 11 2026
CVE
CVE-2026-53413CVE-2026-53414CVE-2026-53415
CVSS
8.3
Product
Zoom Communications · Zoom Clients

Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.

Sources: a.security

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.