Zoom fixes two Windows flaws that could allow remote privilege escalation

• 

  Zoom has released updates for two security flaws in Zoom Workplace for Windows that could allow unauthenticated attackers to remotely gain higher privileges.

• 

  The flaws are tracked as CVE-2026-108186 and CVE-2026-108187.

• 

  CVE-2026-108186 has a CVSS score of 9.6, while CVE-2026-108187 has a score of 8.1.

• 

  The affected versions are earlier than 7.1.5 for CVE-2026-108187 and versions 7.1.0 to before 7.1.8 for CVE-2026-108186.

• 

  Zoom said it was not aware of attacks exploiting the vulnerabilities, and users are advised to install the latest updates.

Who

Zoom released the updates; the flaws could be exploited by unauthenticated attackers.

What

Two Zoom Workplace for Windows vulnerabilities could allow remote privilege escalation.

When

The updates were reported on November 11 and 12, 2026; the release date is not stated.

Where

Zoom Workplace for Windows.

Why

The updates address flaws in input validation and origin validation that could let attackers gain higher privileges over a network.

This story does not have two clearly opposing sides.

This story does not have a timeline yet.