# Zoom patches Windows flaws allowing remote privilege escalation

_Published Wednesday, November 11, 2026 at 1:22 PM EST · Security · Latest · Tier 2 — Notable_

![Zoom patches Windows flaws allowing remote privilege escalation — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhox0GUms6IXvet2jPVoQ5VlUIZ_V7C3iT4HI3qV-Pi7_KRybDyGKGlb2S0Z4uvih4ERjjnGOn9Prav0HpvqNNR3_HVs7W5o0wM0-XsTdp6ploM2Optp5ls97C0JU5DIqubY-lNcLvLia25Z2c__IZt8Ws1OjX0tGavbyvb_dXrltSKj-HJHijQJ9AdDxEB/s1700-nu-rw-lo-l85-e365/zoom-prv.jpg)

Zoom has released updates fixing two vulnerabilities in Zoom Workplace for Windows that could let unauthenticated attackers escalate privileges through network access, The Hacker News reports. CVE-2026-108186 has a CVSS severity score of 9.6, while CVE-2026-108187 is rated 8.1.

The first flaw involves improper input validation and affects versions starting with 7.1.0 and before 7.1.8. The second involves origin validation and affects versions before 7.1.5. Exploitation requires no special permissions or access. Zoom has not mentioned exploitation of either vulnerability in the wild.

## Sources

- [The Hacker News](https://thehackernews.com/2026/11/critical-zoom-workplace-flaw-could.html)

---
Canonical: https://techandbusiness.org/newswire/PngnDVW4_jffkEbtKdZdt_
Published: 2026-11-11T18:22:47.276Z
Story chronology: 2026-11-11T16:12:00.000Z
Retrieved: 2026-11-12T01:04:36.336Z
Publisher: Tech & Business (techandbusiness.org)