Zoom patches critical unauthenticated privilege escalation in Workplace for Windows
CVE-2026-108186 (CVSS 9.6) affects 7.1.0 before 7.1.8; CVE-2026-108187 (CVSS 8.1) affects builds before 7.1.5.
66
CVE-2026-108187
Origin validation error in Zoom Workplace for Windows
- CVSS 3.1
- 8.1 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Zoom Workplace for Windows has an origin validation error. An unauthenticated attacker can reach it over the network if a user interacts, and may escalate privileges. Affected and fixed versions have not been listed.
What to do: Apply Zoom's update for CVE-2026-108187. No workaround is listed.
| Product | Affected |
|---|---|
| Zoom Workplace for Windows | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
- Weakness
- CWE-346
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
In the news
2 storiesAsus and Zoom patch router and Workplace privilege bugs
Zoom Workplace for Windows 7.1.8 fixes CVE-2026-108186 (CVSS 9.6) and CVE-2026-108187.
64