Zoom Workplace for Windows does not properly check incoming data, which could let an outsider connect over the network and raise their access level.

Zoom Workplace for Windows 7.1.0〜7.1.7 に重大な欠陥（CVE-2026-108186、CVSS 9.6）。7.1.8 で修正。CVE-2026-108187 は 7.1.5 未満が対象。悪用は発表に記載なし。

TL;DR Zoom published two security bulletins on November 10, 2026, for Zoom Workplace for Windows. The worst flaw, CVE-2026-108186, carries a Critical CVSS score of 9.6. A second bug, CVE-2026-108187, scores 8.1. Both allow escalation of privilege over the network. Two flaws in Zoom Workplace for Windows let an unauthenticated attacker escalate privileges via network access. Version 7.1.8 fixes both. Update the Windows client now.

TL;DR Zoom published four security bulletins on October 13, 2026, each covering a high-severity flaw. Two Zoom Workplace vulnerabilities allow privilege escalation, while two others could leak information through weak certificate checks. Updating to Zoom Workplace 7.2.0 or later closes most of them. Why It Matters Zoom Workplace runs on desktops and phones across countless companies. As a result, client-side bugs can reach a very large user base.

AI-generated Image of Video Conferencing | RMN News Service Zoom Unveils "Intelligent Office" Era with New Agentic AI and Hybrid Work Solutions Zoom Spaces curr