Zoom has released software updates to address two security flaws affecting its Zoom Workplace product for Windows. One of the issues is a critical bug that could allow an unauthenticated user to gain elevated privileges on affected systems.
The vulnerabilities are identified as CVE-2026-108186 and a second, unspecified flaw. CVE-2026-108186 carries a CVSS score of 9.6.
According to Zoom, CVE-2026-108186 is an improper input‑validation vulnerability that could enable an unauthenticated user to conduct a privilege escalation via an unspecified method.
Zoom Workplace for Windows is the product impacted by these flaws, and the company’s updates are intended to mitigate the risk of unauthorized privilege escalation on systems running the software.
Users and administrators are advised to install the latest updates promptly to protect against these security issues.
<small>Source: The Hacker News — read the original story there.</small>
