Zoom Releases Patches for Critical Privilege Escalation Flaws in Workplace for Windows
Zoom has issued software updates to fix two security vulnerabilities in Zoom Workplace for Windows that could allow unauthenticated remote attackers to escalate privileges. The flaws, tracked as CVE-2026-108186 with a CVSS score of 9.6 and CVE-2026-108187 with a CVSS score of 8.1, both stem from improper input validation and origin validation issues respectively. Successful exploitation requires no special permissions and can be carried out over the network. CVE-2026-108187 affects versions before 7.1.5, while CVE-2026-108186 impacts versions from 7.1.0 up to but not including 7.1.8. This marks the second round of similar high-severity fixes this year after the July remediation of CVE-2026-53412. Users are strongly encouraged to apply the latest patches immediately to reduce exposure.
The Hacker NewsNov 11, 2026Translated from English