See also ZDNet article about this:
Critical Zoom vulnerability triggers remote code execution without user input
https://www.zdnet.com/article/critical-zoom-vulnerability-tr...
Critical Zoom vulnerability triggers remote code execution without user input
https://www.zdnet.com/article/critical-zoom-vulnerability-tr...
"The attack must also originate from an accepted external contact or be a part of the target's same organizational account," Zoom added.
"As a best practice, Zoom recommends that all users only accept contact requests from individuals they know and trust."