The Google Project Zero researcher found a bug in XML parsing on the Zoom client and server.
Source: Threadpost