Zoom patches critical flaw in Workplace for Windows that allows remote privilege escalation

Zoom released updates for two security flaws in Zoom Workplace for Windows, including a critical bug that lets unauthenticated attackers escalate privileges over a network. Users should install the latest patched versions to reduce risk.

Zoom released updates for two security flaws in Zoom Workplace for Windows that allow unauthenticated attackers to escalate privileges over a network. The company fixed one critical flaw and one high-severity flaw and urged users to install the latest versions.

The more severe flaw, CVE-2026-108186 , carries a CVSS score of 9.6. Zoom described it as an improper input validation issue that lets an unauthenticated user escalate privileges through network access. The flaw affects Zoom Workplace for Windows versions starting from 7.1.0 and before 7.1.8.

The second flaw, CVE-2026-108187 , carries a CVSS score of 8.1. Zoom described it as an origin validation issue that also lets an unauthenticated user escalate privileges through network access. This flaw affects Zoom Workplace for Windows versions before 7.1.5.

If attackers exploit either flaw, they can gain higher privileges on affected systems without special permissions or existing access. Zoom reported no known exploitation in the wild.

The fixes follow an earlier patch in July for CVE-2026-53412 (CVSS score: 9.8), an improper input validation flaw in Zoom Workplace for Windows that could let an unauthenticated user take control of accounts.

What Windows users should do

Organizations and individual users can take these steps to limit exposure:

Update Zoom Workplace for Windows now. Install version 7.1.8 or later to address both flaws. Users can download the latest release from the Zoom Download Center .

Verify installed versions. Check desktop clients across managed devices to confirm they run a patched release, especially in environments that delay automatic updates.

Prioritize internet-exposed and shared systems. Because attackers can trigger these flaws over a network without authentication, teams should patch laptops, meeting room PCs, and other widely used endpoints first.

Monitor for unusual activity. Review endpoint and identity logs for unexpected privilege changes or account behavior after updates roll out.

Keeping Zoom clients current closes the known path for these flaws and reduces the chance that attackers can use them to gain control of Windows systems.

Source : Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation , by The Hacker News , The Hacker News , Nov 11, 2026