Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation

Zoom has patched two security vulnerabilities in Zoom Workplace for Windows that could allow unauthenticated remote privilege escalation. The critical flaw, CVE-2026-108186, stems from improper input validation and affects versions from 7.1.0 to before 7.1.8. The second vulnerability, CVE-2026-108187, involves origin validation and impacts versions prior to 7.1.5. Exploitation could enable attackers to escalate privileges without authentication, though there is no evidence of in-the-wild exploitation to date.

AI-extracted · verify before operational use