CVE-2026-108186: Zoom Workplace Critical Privilege Escalation Flaw

# CVE-2026-108186: Zoom Workplace Critical Privilege Escalation Flaw

https://gcdradar.vercel.app/incidents/cve-2026-108186-zoom-workplace-critical-privilege-escalation · AIR-2026-1905 · live

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability): Critical rating (CVSS 9.6) with a vendor fix available.
- Fix status: Patched
- First reported: 2026-11-11
- AI role: No AI role
- Products: Zoom Workplace
- CVE ids: CVE-2026-108186
- CVSS: 9.6

## Summary

Zoom patched a critical improper input validation flaw in Zoom Workplace for Windows that allowed unauthenticated remote privilege escalation. The vendor released software updates to address the vulnerability.

## What to do

Update to the latest Zoom Workplace version.

## Affected and fixed versions

- Affected: Zoom Workplace for Windows
- Fixed in: Latest version

## Latest updates

- 2026-11-11: Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation (https://thehackernews.com/2026/11/critical-zoom-workplace-flaw-could.html)

## Sources

- 2026-11-11 The Hacker News: Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation https://thehackernews.com/2026/11/critical-zoom-workplace-flaw-could.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.