Zoom has notified users of two major flaws impacting Zoom Workplace for Windows, both of which allow remote privilege escalation.
Zoom has issued an update to fix two serious flaws in its Windows version, flaws that were described on the company’s website.
The first is CVE-2026-108186, carrying a 9.6 out of 10 severity rating. The issue impacts Zoom Workplace for Windows, versions 7.1.0 through 7.1.7. The company gives the following description:
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
The second issue is CVE-2026-108187, with a rating of 8.1. This vulnerability impacts versions of Zoom Workplace for Windows before version 7.1.5. The company gives the following description:
Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
As one of the most popular video conferencing platforms, Zoom is a high-profile target for bad actors. Its importance has only increased as the company has branched out into the productivity space.
In view of these CVEs, users would do well to update immediately.