Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation
Source: Security Affairs
At a glance
Zoom fixes two Windows Workplace flaws, including a critical bug that could let unauthenticated attackers remotely escalate privileges. Zoom has released security updates to fix two vulnerabilities in Zoom Workplace for Windows. One is critical and could let attackers gain higher privileges on affected systems. The vulnerabilities are: CVE-2026-108186 (CVSS 9.6): An input validation flaw that could allow an attacker to gain higher privileges through a network connection, without logging in. CVE-2026-108187 (CVSS 8.1): An origin validation flaw that could also allow an unauthenticated attacker…