Zoom Releases Updates for Security Flaws in Workplace for Windows

Zoom has released updates to address two security vulnerabilities affecting Zoom Workplace for Windows. These flaws, identified as CVE-2026-108186 and CVE-2026-108187, could allow privilege escalation on affected systems.

CVE-2026-108186, with a CVSS score of 9.6, is an improper input validation vulnerability impacting versions from 7.1.0 to before 7.1.8. CVE-2026-108187, scoring 8.1, is an origin validation vulnerability affecting versions before 7.1.5.

Both vulnerabilities could allow an unauthenticated user to conduct an escalation of privilege via network access.

Zoom makes no mention of the vulnerabilities being exploited in the wild. Users are advised to apply the latest patches to mitigate potential threats.