Zoom Addresses Critical Vulnerabilities in Workplace Software

12 November 2026 1 min read هدهد تك | Hudhud Tech

Zoom has released software updates to fix two security vulnerabilities affecting Zoom Workplace for Windows, including a critical flaw that could enable privilege escalation on compromised systems.

The vulnerabilities are identified as follows:

CVE-2026-108186 (CVSS score: 9.6) – This vulnerability involves improper input validation, allowing an unauthenticated user to escalate privileges via network access.
CVE-2026-108187 (CVSS score: 8.1) – This origin validation flaw also permits unauthenticated users to escalate privileges through network access.

Exploitation of either vulnerability could allow remote attackers to gain elevated privileges without needing special permissions or access.

CVE-2026-108187 affects versions of Zoom Workplace for Windows prior to 7.1.5, while CVE-2026-108186 impacts versions from 7.1.0 to before 7.1.8.

In July, Zoom addressed another serious input validation issue in Zoom Workplace for Windows, identified as CVE-2026-53412 (CVSS score: 9.8), which could allow unauthenticated users to take control of accounts.

Although Zoom has not reported any active exploitation of these vulnerabilities, users are strongly advised to apply the latest patches to protect against potential threats.

Source: The Hacker News

What do you think of this story?