Zoom zero-day flaw allows code execution on victim’s Windows machine

The attack doesn’t trigger a security warning and can be pulled off by getting the victim to perform a typical action such as opening a received document file.